CVE-2024-33991: Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

Published Aug 6, 2024

Updated

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/eventwinner/index.php'.

Affected Software

1 affected component

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·01:07 PM

Data Sourced

via MITRE·01:07 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33991?

CVE-2024-33991 is classified as a high severity Cross-Site Scripting (XSS) vulnerability.

How do I fix CVE-2024-33991?

To fix CVE-2024-33991, update to the latest version of the School Event Management System that addresses this XSS vulnerability.

Who is affected by CVE-2024-33991?

CVE-2024-33991 affects users of the School Event Management System version 1.0.

What type of vulnerability is CVE-2024-33991?

CVE-2024-33991 is a Cross-Site Scripting (XSS) vulnerability.

What could an attacker do with CVE-2024-33991?

An attacker could exploit CVE-2024-33991 to execute arbitrary scripts in the context of a user's session, potentially retrieving sensitive information.