CVE-2024-10840mediumCWE-707CWE-74CWE-79

CVE-2024-10840: medium-severity vulnerability in romadebrian WEB-Sekolah

romadebrian WEB-Sekolah Backend akun_edit.php cross site scripting

Published

Follow this CVE+ Monitor WEB-Sekolah

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.4%
A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akun_edit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
romadebrian · WEB-Sekolah
Related CVEs — romadebrian WEB-Sekolah

In the same product, most dangerous first.

CVE-2024-10841MEDIUMromadebrian WEB-Sekolah Mail Proses_Kirim.php sql injectionEPSS 0.4%CVE-2024-10842MEDIUMromadebrian WEB-Sekolah Backend Proses_Edit_Akun.php cross site scriptingEPSS 0.4%