Beveiligingsadvies

CVE-2024-40478

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-08-09 00:00:00
Laatst bijgewerkt 2025-03-13 15:37:59
Toegewezen door mitre
CVSS-score 5.4
Status PUBLISHED

Beschrijving

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields