CVE-2024-34224

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.

Score

CVSS 3.1 7.3 High

Status

Analyzed - cve@mitre.org

Published

2024-05-14

Last modified

2025-02-13

Weaknesses

CWE-79

Affected products

• Computer Laboratory Management System (Oretnom23)
• Computer Laboratory Management System (Sourcecodester)

References

• https://github.com/dovankha/CVE-2024-34224