CVE-2024-51222: XSS
A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51222?
CVE-2024-51222 is classified as a high severity stored cross-site scripting (XSS) vulnerability.
How do I fix CVE-2024-51222?
To fix CVE-2024-51222, validate and sanitize user input in the Name parameter before processing it.
Who is affected by CVE-2024-51222?
CVE-2024-51222 affects users of Phpgurukul Vehicle Record Management System version 1.0.
What can attackers do with CVE-2024-51222?
Attackers can execute arbitrary web scripts or HTML in the context of the affected application due to CVE-2024-51222.
Is there a patch available for CVE-2024-51222?
As of now, a specific patch for CVE-2024-51222 has not been officially released, so mitigation through input validation is recommended.