CVE-2024-44798: XSS
Published Sep 13, 2024
·Updated
phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting (XSS) in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters.
Affected Software
1 affected component
Anujk305 Bus Pass Management System=1.0
Event History
Sep 13, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-44798?
CVE-2024-44798 has a significant severity level due to its potential for Cross-site scripting (XSS) attacks.
2
How do I fix CVE-2024-44798?
To fix CVE-2024-44798, you should sanitize and validate the input for the fromdate and todate parameters in the application.
3
Which software is affected by CVE-2024-44798?
CVE-2024-44798 affects phpgurukul Bus Pass Management System version 1.0.
4
Can CVE-2024-44798 lead to data leakage?
Yes, CVE-2024-44798 can potentially lead to data leakage through XSS attacks, allowing unauthorized users to execute scripts.
5
Is there a patch available for CVE-2024-44798?
As of now, there is no official patch available for CVE-2024-44798, therefore implementing input validation is crucial.