CVE-2024-53635

A Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter.

Score

CVSS 3.1 4.8 Medium

Status

Analyzed - cve@mitre.org

Published

2024-11-27

Last modified

2024-11-27

Weaknesses

CWE-79

Affected products

• Covid19 Testing Management System (Phpgurukul)

References

• https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/COVID19/Reflected%20Cross%20Site%20Scripting.pdf