CVE-2024-0726: Project Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scripting
A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input test%22%3Cscript%3Ealert(%27Torada%27)%3C/script%3E leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251549 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0726?
CVE-2024-0726 has been rated as problematic.
What component is affected by CVE-2024-0726?
CVE-2024-0726 affects the admin_login.php file of the Admin Login Module in Project Worlds Student Project Allocation System 1.0.
What type of vulnerability is CVE-2024-0726?
CVE-2024-0726 is related to the manipulation of the argument msg leading to potential security issues.
How do I fix CVE-2024-0726?
To remediate CVE-2024-0726, review and sanitize user input in the admin_login.php file.
What software versions are affected by CVE-2024-0726?
CVE-2024-0726 affects version 1.0 of Project Worlds Student Project Allocation System.