ZeroHour

CVE-2024-53635

PoC
CVSS 3.1
4.8 medium
EPSS
<1%p40
Published
()
Modified
Description

A Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter.

Vendors
phpgurukul
Products
covid19 testing management system
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.