CVE-2024-2135: Bdtask Hospita AutoManager Hospital Activities Page form cross site scripting
A vulnerability was found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This issue affects some unknown processing of the file /hospitalactivities/birth/form of the component Hospital Activities Page. The manipulation of the argument Description with the input <img src=a onerror=alert(1)> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255497 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2135?
CVE-2024-2135 has been classified as problematic, indicating a significant security concern.
How do I fix CVE-2024-2135?
To remediate CVE-2024-2135, it's recommended to update Bdtask Hospita AutoManager to a version later than 20240223.
What components are affected by CVE-2024-2135?
CVE-2024-2135 affects the Hospital Activities Page component of Bdtask Hospita AutoManager.
What is the nature of the vulnerability in CVE-2024-2135?
CVE-2024-2135 involves the manipulation of the Description argument in the file /hospital_activities/birth/form.
Which versions of Bdtask Hospita AutoManager are impacted by CVE-2024-2135?
CVE-2024-2135 impacts all Bdtask Hospita AutoManager versions up to and including 20240223.