CVE-2024-31544: XSS

Published Apr 9, 2024

Updated

A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord.

Affected Software

1 affected component

Computer Laboratory Management System Computer Laboratory Management System

Event History

Apr 9, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-31544?

CVE-2024-31544 has a high severity rating due to the potential for attackers to execute arbitrary JavaScript code.

How do I fix CVE-2024-31544?

To fix CVE-2024-31544, sanitize user inputs, particularly in the 'remarks', 'borrower_name', and 'faculty_department' parameters before processing.

Which software is affected by CVE-2024-31544?

CVE-2024-31544 affects version 1.0 of the Computer Laboratory Management System software.

What type of vulnerability is CVE-2024-31544?

CVE-2024-31544 is a stored cross-site scripting (XSS) vulnerability.

What can attackers do with CVE-2024-31544?

Attackers can execute arbitrary JavaScript code in the context of the victim's browser, potentially stealing sensitive information.