CVE-2024-25207

2024-02-1400:00:00

mitre

www.cve.org

cve-2024-25207

cross-site scripting

vulnerability

web scripts

html

crafted payload

contact number parameter

EPSS

Percentile

14.0%

JSON

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Contact Number parameter.