CVE-2024-53481

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p40

Published

Dec 10, 2024 (Dec 10, 2024)

Modified

Jul 5, 2026

Description

A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "Last name" parameters.

Vendors: phpgurukul
Products: beauty parlour management system
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.