CVE-2024-33989: Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

Published Aug 6, 2024

Updated

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'eventdate' and 'events' parameters in 'port/eventprint.php'.

Affected Software

1 affected component

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·01:06 PM

Data Sourced

via MITRE·01:06 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33989?

CVE-2024-33989 has been classified as a high severity Cross-Site Scripting (XSS) vulnerability.

How do I fix CVE-2024-33989?

To fix CVE-2024-33989, upgrade the School Event Management System to the latest patched version.

Who is affected by CVE-2024-33989?

CVE-2024-33989 affects users of the Janobe School Event Management System running version 1.0.

What kind of attack can exploit CVE-2024-33989?

An attacker could exploit CVE-2024-33989 by sending a malicious JavaScript payload to authenticated users.

What is the potential impact of CVE-2024-33989?

The potential impact of CVE-2024-33989 is that an attacker could partially take over a user's browser session.