CVE-2024-51209: XSS
Published Nov 20, 2024
·Updated
Cross-Site Scripting (XSS) vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page.
Affected Software
2 affected components
Anuj Kumar Client Management System
Phpgurukul Client Management System=1.2
Event History
Nov 20, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-51209?
CVE-2024-51209 is classified as a medium severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-51209?
To fix CVE-2024-51209, you should sanitize and validate the input from the search fields in the admin and client search invoice pages.
3
Who is affected by CVE-2024-51209?
CVE-2024-51209 affects users of Anuj Kumar's Client Management System Version 1.2.
4
What types of attacks can CVE-2024-51209 facilitate?
CVE-2024-51209 can facilitate local attackers to inject malicious web scripts or HTML code.
5
Is CVE-2024-51209 a remote vulnerability?
CVE-2024-51209 is not a remote vulnerability; it requires local access to exploit the XSS issue.