Security Advisory

CVE-2024-54936

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-12-09 00:00:00
Last updated 2024-12-10 17:11:07
Assigner mitre
State PUBLISHED

Description

A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message.php of Kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the my_message parameter.