CVE-2024-27719

2024-03-2819:15:48

[email protected]

web.nvd.nist.gov

xss

faq management system

remote attacker

sensitive information

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A cross site scripting (XSS) vulnerability in rems FAQ Management System v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the Frequently Asked Question field in the Add FAQ function.

References

www.sourcecodester.com/php/17175/faq-management-system-using-php-and-mysql-source-code.html

www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2024-002