CVE-2024-48284: XSS
A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary scripts via the searchkey parameter in a POST HTTP request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48284?
CVE-2024-48284 is categorized as a high-severity Reflected Cross-Site Scripting (XSS) vulnerability that can lead to remote code execution.
How do I fix CVE-2024-48284?
To fix CVE-2024-48284, validate and sanitize the 'searchkey' parameter in the /search-result.php page to prevent script injection.
What software is affected by CVE-2024-48284?
CVE-2024-48284 affects PHPGurukul User Registration & Login and User Management System version 3.2.
Who can be impacted by CVE-2024-48284?
Remote attackers can exploit CVE-2024-48284 to inject malicious scripts, potentially impacting any users interacting with the vulnerable system.
Is there a patch available for CVE-2024-48284?
As of now, there has been no official patch released for CVE-2024-48284, so immediate mitigation through code changes is recommended.