CVE-2024-53568: XSS

Published Apr 22, 2025

Updated

A stored cross-site scripting (XSS) vulnerability in the Image Upload section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the tag parameter.

Affected Software

1 affected component

Volmarg Personal Management System

Event History

Apr 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-53568?

CVE-2024-53568 is classified as a stored cross-site scripting (XSS) vulnerability, which can have a high impact on affected systems.

How do I fix CVE-2024-53568?

To fix CVE-2024-53568, ensure that input validation and output encoding are properly implemented in the Image Upload section of the Volmarg Personal Management System.

Who is affected by CVE-2024-53568?

CVE-2024-53568 affects users of Volmarg Personal Management System v1.4.65 that allow file uploads without adequate sanitization.

Can CVE-2024-53568 be exploited remotely?

Yes, CVE-2024-53568 can be exploited by authenticated attackers who can inject malicious scripts via the tag parameter.

What are the potential impacts of CVE-2024-53568?

The potential impacts of CVE-2024-53568 include data theft, session hijacking, and defacement of the web application.