CVE-2024-53635: XSS
A Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53635?
CVE-2024-53635 is considered a high severity vulnerability due to the potential for arbitrary code execution via a reflected XSS attack.
How do I fix CVE-2024-53635?
To fix CVE-2024-53635, sanitize and validate the 'searchdata' POST request parameter before processing it to prevent the execution of arbitrary code.
Who is affected by CVE-2024-53635?
CVE-2024-53635 affects users of PHPGurukul COVID 19 Testing Management System version 1.0.
What type of vulnerability is CVE-2024-53635?
CVE-2024-53635 is a Reflected Cross Site Scripting (XSS) vulnerability.
What can attackers achieve with CVE-2024-53635?
Attackers can execute arbitrary code on a victim's browser by exploiting CVE-2024-53635 through crafted requests.