CVE-2024-0190: RRJ Nueva Ecija Engineer Online Portal Quiz add_quiz.php cross site scripting
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file addquiz.php of the component Quiz Handler. The manipulation of the argument Quiz Title/Quiz Description with the input </title><scRipt>alert(x)</scRipt> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249503.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0190?
CVE-2024-0190 is classified as problematic, indicating a significant vulnerability that requires attention.
How do I fix CVE-2024-0190?
To remediate CVE-2024-0190, ensure the secure input validation of the Quiz Title and Quiz Description fields in add_quiz.php.
What systems are affected by CVE-2024-0190?
CVE-2024-0190 affects RRJ Nueva Ecija Engineer Online Portal version 1.0.
What type of vulnerability is CVE-2024-0190?
CVE-2024-0190 represents a potential security risk related to improper handling of user input in the Quiz Handler.
Is CVE-2024-0190 being exploited in the wild?
Currently, there is no public information confirming active exploitation of CVE-2024-0190.