CVE-2024-57488: XSS

Published Jan 13, 2025

Updated

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter in /admin/edit-vehicle.php.

Affected Software

2 affected components

Code-projects Online Car Rental System

Code-projects Online Car Rental System=1.0

Event History

Jan 13, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-57488?

CVE-2024-57488 is classified as a moderate severity vulnerability due to its potential for Cross Site Scripting (XSS) attacks.

How do I fix CVE-2024-57488?

To fix CVE-2024-57488, ensure that input validation and output encoding are implemented for the vehicalorcview parameter in the /admin/edit-vehicle.php file.

What systems are affected by CVE-2024-57488?

CVE-2024-57488 specifically affects version 1.0 of the Code-Projects Online Car Rental System.

What type of vulnerability is CVE-2024-57488?

CVE-2024-57488 is a Cross Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages.

Can CVE-2024-57488 be exploited remotely?

Yes, CVE-2024-57488 can be exploited remotely, allowing attackers to execute harmful scripts in the context of a user's browser.