CVE-2024-33978: XSS
Published Aug 6, 2024
·Updated
Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'category' parameter in '/index.php'.
Affected Software
1 affected component
Janobe Young Entrepreneur E-negosyo System=1.0
Event History
Aug 6, 2024
CVE Published
via NVD·11:16 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-33978?
CVE-2024-33978 is rated as high severity due to its potential to exploit user sessions via cross-site scripting.
2
How do I fix CVE-2024-33978?
To fix CVE-2024-33978, you should validate and sanitize input data in the 'category' parameter of the '/index.php' file.
3
Which version of the E-Negosyo System is affected by CVE-2024-33978?
Only version 1.0 of the E-Negosyo System is affected by CVE-2024-33978.
4
What type of vulnerability is CVE-2024-33978?
CVE-2024-33978 is a cross-site scripting (XSS) vulnerability.
5
What could an attacker achieve by exploiting CVE-2024-33978?
An attacker could obtain session cookie details from victims by sending specially crafted URLs.