CVE-2024-45986: XSS
A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45986?
CVE-2024-45986 is classified as a stored Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2024-45986?
To fix CVE-2024-45986, validate and sanitize user inputs to prevent malicious scripts from being stored.
What software is affected by CVE-2024-45986?
CVE-2024-45986 affects Projectworld Online Voting System version 1.0.
What are the consequences of CVE-2024-45986?
Exploitation of CVE-2024-45986 can lead to unauthorized script execution in the context of user sessions.
How does CVE-2024-45986 occur?
CVE-2024-45986 occurs when an account is registered with a malicious JavaScript payload that is stored and later executed.