CVE-2024-45528: XSS
Published Sep 2, 2024
·Updated
CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows addmembers.php fullname stored XSS.
Affected Software
2 affected components
Codeastro MembershipM-PHP
Codeastro Membership Management System=1.0
Event History
Sep 2, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45528?
CVE-2024-45528 is classified as a high severity vulnerability due to its potential for stored cross-site scripting (XSS).
2
How do I fix CVE-2024-45528?
To fix CVE-2024-45528, implement input validation and output encoding for the fullname parameter in add_members.php.
3
What type of vulnerability is CVE-2024-45528?
CVE-2024-45528 is a stored cross-site scripting (XSS) vulnerability affecting CodeAstro MembershipM-PHP.
4
Which versions of CodeAstro MembershipM-PHP are affected by CVE-2024-45528?
CodeAstro MembershipM-PHP version 1.0 is affected by CVE-2024-45528.
5
How can CVE-2024-45528 be exploited?
CVE-2024-45528 can be exploited by injecting malicious scripts into the fullname field, which are then stored and executed when accessed by other users.