CVE-2024-28277: XSS
In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting (XSS) attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloads.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28277?
The CVE-2024-28277 vulnerability is classified as a high severity risk due to its potential for Stored Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2024-28277?
To mitigate the CVE-2024-28277 vulnerability, sanitize and validate the input provided in the subject_name= parameter to prevent malicious JavaScript execution.
What systems are affected by CVE-2024-28277?
CVE-2024-28277 specifically affects Sourcecodester School Task Manager version 1.0.
What type of attack can exploit CVE-2024-28277?
CVE-2024-28277 can be exploited through Stored Cross-Site Scripting (XSS) attacks, allowing attackers to inject and execute malicious scripts.
Is there a known exploit for CVE-2024-28277?
Yes, there are known exploits for CVE-2024-28277 that utilize the vulnerable subject_name= parameter to execute harmful scripts.