CVE-2024-51225: XSS
A stored cross-site scripting (XSS) vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the brandname parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51225?
CVE-2024-51225 is a stored cross-site scripting (XSS) vulnerability with a high severity rating due to its potential for exploitation.
How do I fix CVE-2024-51225?
To fix CVE-2024-51225, input validation and output encoding should be implemented for the brandname parameter in /admin/add-brand.php.
What are the potential impacts of CVE-2024-51225?
The potential impacts of CVE-2024-51225 include unauthorized script execution and the ability to steal cookies or session tokens.
Who is affected by CVE-2024-51225?
CVE-2024-51225 affects users of Phpgurukul Vehicle Record Management System version 1.0.
How can attackers exploit CVE-2024-51225?
Attackers can exploit CVE-2024-51225 by injecting a crafted payload into the brandname parameter via the /admin/add-brand.php interface.