CVE-2024-24097

Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cve@mitre.org

Published

2024-03-12

Last modified

2024-11-07

Weaknesses

CWE-79

Affected products

• Scholars Tracking System (Code-projects)

References

• https://github.com/ASR511-OO7/CVE-2024-24097/blob/main/CVE-12