Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-3508 State: PUBLISHED Published: 2024-04-25T17:46:21.762Z Last Updated: 2025-11-20T19:02:23.754Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Trusted Profile Analyzer Problem Types: CWE-400 Description: A flaw was found in Bombastic, which allows authenticated users to upload compressed (bzip2 or zstd) SBOMs. The API endpoint verifies the presence of some fields and values in the JSON. To perform this verification, the uploaded file must first be decompressed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-3508 - https://bu
P Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-3508 - https://bugzilla.redhat.com/show_bug.cgi?id=2274109
CVE ID: CVE-2024-3509 State: PUBLISHED Published: 2025-06-02T16:44:28.668Z Last Updated: 2025-06-02T17:05:38.912Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: WSO2 Products: WSO2 Enterprise Integrator, WSO2 API Manager, WSO2 Open Banking AM, WSO2 Open Banking IAM, WSO2 Identity Server as Key Manager, WSO2 Identity Server, WSO2 Carbon Registry Resources UI Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insufficient input validation in the Rich Text Editor within the registry section. To exploit this vulnerability, a malicious actor must have a valid user
he Rich Text Editor within the registry section. To exploit this vulnerability, a malicious actor must have a valid user account with administrative access to the Management Console. If successful, the actor could inject persistent JavaScript payloads, enabling the theft of user data or execution of unauthorized actions on behalf of other users. While this issue enables persistent client-side script execution, session-related cookies remain protected with the httpOnly flag, preventing session hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-2701
CVE ID: CVE-2024-3510 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:32.921Z Description: No description available.
CVE ID: CVE-2024-3511 State: PUBLISHED Published: 2025-06-23T08:47:55.266Z Last Updated: 2025-06-23T12:43:45.452Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WSO2 Products: WSO2 Enterprise Integrator, WSO2 API Manager, WSO2 Identity Server as Key Manager, WSO2 Identity Server, WSO2 Open Banking AM, WSO2 Open Banking IAM, WSO2 Carbon User Manager Kernel Problem Types: CWE-863 Description: An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass m
e to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization. Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2024-2702/
CVE ID: CVE-2024-3512 State: REJECTED Published: 2024-04-09T18:58:36.805Z Last Updated: 2024-04-25T12:57:58.911Z Description: No description available.
CVE ID: CVE-2024-3513 State: PUBLISHED Published: 2024-07-02T07:37:03.888Z Last Updated: 2024-08-01T20:12:07.867Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ultimateblocks Products: Ultimate Blocks – WordPress Blocks Plugin Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title tag parameter in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor acce
icient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/428b4d6b-a4db-4e60-8c15-24efdfe6aea1?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3108401%40ultimate-blocks%2Ftrunk&old=3102541%40ultimate-blocks%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3514 State: REJECTED Published: 2024-04-09T18:58:35.883Z Last Updated: 2024-04-24T16:13:48.705Z Description: No description available.
CVE ID: CVE-2024-3515 State: PUBLISHED Published: 2024-04-10T18:41:39.161Z Last Updated: 2025-02-13T17:52:30.796Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_10.html - https://issues.chromium.org/issues/331123811 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message
um.org/issues/331123811 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDHNEFD76ORM7WBWAEZT6HSYDMZVIED4/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EW66LXDACTB5FCHLUPZOGD2KA2J62Q2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVEJEW7UCSUSK2J2FYQRZZPI74P2D3JP/
CVE ID: CVE-2024-3516 State: PUBLISHED Published: 2024-04-10T18:41:38.766Z Last Updated: 2025-03-13T17:44:19.424Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_10.html - https://issues.chromium.org/issues/328859176 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraprojec
issues.chromium.org/issues/328859176 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDHNEFD76ORM7WBWAEZT6HSYDMZVIED4/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EW66LXDACTB5FCHLUPZOGD2KA2J62Q2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVEJEW7UCSUSK2J2FYQRZZPI74P2D3JP/
CVE ID: CVE-2024-3517 State: PUBLISHED Published: 2024-05-02T16:52:28.825Z Last Updated: 2024-08-01T20:12:07.629Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: averta Products: Shortcodes and extra features for Phlox theme Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion Widget in all versions up to, and including, 2.15.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and hi
put sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a4541890-4c0d-4348-91df-42cf4b575514?source=cve - https://plugins.trac.wordpress.org/browser/auxin-elements/tags/2.15.5/includes/elementor/widgets/accordion.php#L745
CVE ID: CVE-2024-3518 State: PUBLISHED Published: 2024-05-21T23:30:41.063Z Last Updated: 2024-08-01T20:12:07.630Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: dglingren Products: Media Library Assistant Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and including, 3.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributo
of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access or higher, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a7af1a03-8382-4593-a41f-8cdb1bb9e53b?source=cve - https://plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-shortcode-custom-list.php#L1971 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3069819%40media-library
ist.php#L1971 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3069819%40media-library-assistant%2Ftrunk&old=3060779%40media-library-assistant%2Ftrunk&sfp_email=&sfph_mail=#file3
CVE ID: CVE-2024-3519 State: PUBLISHED Published: 2024-05-21T23:30:40.460Z Last Updated: 2024-08-01T20:12:07.692Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: dglingren Products: Media Library Assistant Problem Types: CWE-87 Improper Neutralization of Alternate XSS Syntax Description: The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the lang parameter in all versions up to, and including, 3.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into perf
nticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7e1cdaf3-76fe-4b73-b30b-4554f0d34d11?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3069819%40media-library-assistant%2Ftrunk&old=3060779%40media-library-assistant%2Ftrunk&sfp_email=&sfph_mail=#file3
CVE ID: CVE-2024-3520 State: PUBLISHED Published: 2024-05-02T16:51:44.028Z Last Updated: 2024-08-01T20:12:07.603Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: trustyplugins Products: Country State City Dropdown CF7 Problem Types: CWE-862 Missing Authorization Description: The Country State City Dropdown CF7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tc_csca_patch_settings function in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with subscriber access and above, to add states or cities to the dropdown. Additional Analyst Notes: - CISA ADP
ackers, with subscriber access and above, to add states or cities to the dropdown. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/08ccd4a3-ea1f-49b3-b4ce-ab1e247e1f76?source=cve - https://plugins.trac.wordpress.org/changeset/3068802/country-state-city-auto-dropdown/trunk?contextall=1&old=2751425&old_path=%2Fcountry-state-city-auto-dropdown%2Ftrunk
CVE ID: CVE-2024-3521 State: PUBLISHED Published: 2024-04-09T22:31:04.562Z Last Updated: 2024-08-01T20:12:07.743Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Byzoro Products: Smart S80 Management Platform Problem Types: CWE-434 Description: A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259892. NOTE: The v
xploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259892. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259892 - https://vuldb.com/?ctiid.259892 - https://vuldb.com/?submit.308509 - https://github.com/garboa/cve_3/blob/main/Upload2.md
CVE ID: CVE-2024-3522 State: PUBLISHED Published: 2024-04-09T23:00:05.785Z Last Updated: 2024-08-01T20:12:07.789Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Event Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.php. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259893 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vuln
and may be used. The identifier VDB-259893 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259893 - https://vuldb.com/?ctiid.259893 - https://vuldb.com/?submit.312504 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%201.pdf
CVE ID: CVE-2024-3523 State: PUBLISHED Published: 2024-04-09T23:00:07.253Z Last Updated: 2024-08-23T17:50:30.232Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Online Event Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259894 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container:
be used. VDB-259894 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.259894 - https://vuldb.com/?ctiid.259894 - https://vuldb.com/?submit.312505 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%202.pdf
CVE ID: CVE-2024-3524 State: PUBLISHED Published: 2024-04-09T23:31:04.917Z Last Updated: 2024-08-12T13:30:13.057Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Online Event Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Campcodes Online Event Management System 1.0. This issue affects some unknown processing of the file /views/process.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259895. Additional Analy
disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259895. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.259895 - https://vuldb.com/?ctiid.259895 - https://vuldb.com/?submit.312506 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%203.pdf
CVE ID: CVE-2024-3525 State: PUBLISHED Published: 2024-04-10T00:00:04.924Z Last Updated: 2024-08-22T19:17:11.632Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Online Event Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Campcodes Online Event Management System 1.0. Affected is an unknown function of the file /views/index.php. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259896. Additional Analyst Notes: - CVE Progra
o the public and may be used. The identifier of this vulnerability is VDB-259896. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.259896 - https://vuldb.com/?ctiid.259896 - https://vuldb.com/?submit.312507 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%204.pdf
CVE ID: CVE-2024-3526 State: PUBLISHED Published: 2024-04-10T00:31:05.232Z Last Updated: 2025-02-21T17:06:15.563Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Online Event Management System Problem Types: CWE-79 Description: A vulnerability has been found in Campcodes Online Event Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259897 was assigned to this vulnerability. Additional Analyst N
closed to the public and may be used. The identifier VDB-259897 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259897 - https://vuldb.com/?ctiid.259897 - https://vuldb.com/?submit.312508 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Event%20Management%20System/Online%20Event%20Management%20System%20-%20vuln%205.pdf
CVE ID: CVE-2024-3528 State: PUBLISHED Published: 2024-04-10T00:31:06.638Z Last Updated: 2024-08-01T20:12:07.656Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Online Student Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Online Student Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file units_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259898 is the identifier assigned to this vulnerabilit
The exploit has been disclosed to the public and may be used. VDB-259898 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259898 - https://vuldb.com/?ctiid.259898 - https://vuldb.com/?submit.312519 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%201.pdf
CVE ID: CVE-2024-3529 State: PUBLISHED Published: 2024-04-10T01:00:05.456Z Last Updated: 2024-08-01T20:12:07.863Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Online Student Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been classified as problematic. This affects an unknown part of the file students_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-2598
he exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259899. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259899 - https://vuldb.com/?ctiid.259899 - https://vuldb.com/?submit.312520 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%202.pdf
CVE ID: CVE-2024-3530 State: PUBLISHED Published: 2024-04-10T01:00:07.094Z Last Updated: 2024-08-01T20:12:07.703Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Online Student Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file Marks_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259900. Additional
xploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259900. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259900 - https://vuldb.com/?ctiid.259900 - https://vuldb.com/?submit.312521 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%203.pdf
CVE ID: CVE-2024-3531 State: PUBLISHED Published: 2024-04-10T01:31:04.932Z Last Updated: 2024-08-01T20:12:07.620Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Online Student Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.
exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259901 - https://vuldb.com/?ctiid.259901 - https://vuldb.com/?submit.312522 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%204.pdf