CVE-2024-27719

2024-03-2800:00:00

mitre

www.cve.org

cve-2024-27719

cross site scripting

remote attacker

sensitive information

crafted payload

faq management system

AI Score

5.3

Confidence

High

EPSS

Percentile

9.0%

JSON

A cross site scripting (XSS) vulnerability in rems FAQ Management System v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the Frequently Asked Question field in the Add FAQ function.

References

www.sourcecodester.com/php/17175/faq-management-system-using-php-and-mysql-source-code.html

www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2024-002