Security Advisory

CVE-2024-54935

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-12-09 00:00:00
Last updated 2024-12-10 17:10:01
Assigner mitre
State PUBLISHED

Description

A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message_teacher_to_student.php of kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the my_message parameter.