CVE-2024-29318: XSS
Published Jul 5, 2024
·Updated
Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascript code.
Affected Software
1 affected component
personal-management-system Personal Management System=1.4.64
Event History
Jul 5, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-29318?
CVE-2024-29318 is classified as a moderate severity vulnerability due to its potential for exploitation via stored cross site scripting.
2
How do I fix CVE-2024-29318?
To fix CVE-2024-29318, ensure that uploaded SVG files are thoroughly validated and sanitized to remove any embedded JavaScript code.
3
What type of attack is possible due to CVE-2024-29318?
CVE-2024-29318 allows an attacker to execute JavaScript code in the context of another user's browser session.
4
Which software is affected by CVE-2024-29318?
CVE-2024-29318 affects Volmarg Personal Management System version 1.4.64.
5
Can CVE-2024-29318 be exploited remotely?
Yes, CVE-2024-29318 can be exploited remotely by uploading a malicious SVG file containing JavaScript.