CVE-2024-33986: Cross-Site Scripting (XSS) vulnerability in Janobe products
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/department/index.php'.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33986?
CVE-2024-33986 has been identified as a Cross-Site Scripting (XSS) vulnerability, which can significantly impact the security of affected systems.
How do I fix CVE-2024-33986?
To fix CVE-2024-33986, update the affected Janobe School Attendance Monitoring System and School Event Management System to the latest version that addresses this vulnerability.
Which versions are affected by CVE-2024-33986?
CVE-2024-33986 affects version 1.0 of both the Janobe School Attendance Monitoring System and the Janobe School Event Management System.
What is the impact of exploiting CVE-2024-33986?
Exploiting CVE-2024-33986 allows an attacker to obtain sensitive session cookie details from a victim through a specially crafted URL.
Who can be impacted by CVE-2024-33986?
Users of the Janobe School Attendance Monitoring System and Janobe School Event Management System who are on version 1.0 are susceptible to CVE-2024-33986.