Paper/Archive/CVE-2024-28456

CVE-2024-28456

phpgurukul online_marriage_registration_system — Cross Site Scripting vulnerability in Campcodes Online Marriage Registration System v.1.0 allows a remote attacker to execute arbitrary c…

EPSS 0.7%public exploit CVSS 9.0

critical.is priorityof 100

CVSS 9.0 (ADP)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 53.1.531 × 2010.6 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Cross Site Scripting vulnerability in Campcodes Online Marriage Registration System v.1.0 allows a remote attacker to execute arbitrary code via the text fields in the marriage registration request form.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

online_marriage_registration_system1.0–CISA-ADP

Scores by source

CISA ADP9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refcampcodes.com/projects/php/online-marriage-registration-system refpastebin.com/CYMDR4ss