CVE-2024-34224: XSS

Published May 14, 2024

Updated

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.

Affected Software

2 affected components

Computer Laboratory Management System Computer Laboratory Management System

oretnom23 Computer Laboratory Management System=1.0

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

May 14, 2024

CVE Published

via NVD·03:38 PM

Sep 3, 2024

Data Sourced

via MITRE·06:32 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-34224?

CVE-2024-34224 is categorized as a high-severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2024-34224?

To fix CVE-2024-34224, validate and sanitize user inputs for the firstname, middlename, and lastname parameters in the input functions.

Who is affected by CVE-2024-34224?

CVE-2024-34224 affects users of Computer Laboratory Management System version 1.0.

What kind of attacks can CVE-2024-34224 enable?

CVE-2024-34224 can enable remote attackers to inject arbitrary web script or HTML into the application.

Is there a patch available for CVE-2024-34224?

Currently, there is no official patch for CVE-2024-34224; users should implement input validation techniques as a workaround.