CVE-2024-33993: Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

Published Aug 6, 2024

Updated

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in /candidate/index.php'.

Affected Software

1 affected component

Janobe School Event Management System=1.0

Remediation

Information

There is no reported solution at this time.

Event History

Aug 6, 2024

CVE Published

via MITRE·01:09 PM

Data Sourced

via MITRE·01:09 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-33993?

The severity of CVE-2024-33993 is classified as medium due to its potential for session hijacking through Cross-Site Scripting.

How do I fix CVE-2024-33993?

To fix CVE-2024-33993, update the School Event Management System to a version that patches the Cross-Site Scripting vulnerability.

What kind of attack is CVE-2024-33993?

CVE-2024-33993 is a Cross-Site Scripting (XSS) vulnerability that allows attackers to manipulate the view parameter to steal session details.

What versions of the School Event Management System are affected by CVE-2024-33993?

CVE-2024-33993 affects version 1.0 of the School Event Management System.

Can CVE-2024-33993 be exploited remotely?

Yes, CVE-2024-33993 can be exploited remotely by sending specially crafted URLs to victims.