CVE-2024-35345

2024-05-3016:15:10

[email protected]

web.nvd.nist.gov

vulnerability

diño physics school assistant

cross-site scripting

code manipulation

6.5 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the file /classes/Users.php. Manipulating the argument id results in cross-site scripting.

References

vuln.pentester.stream/pentester-vulnerability-research/post/2298533/vuln1-cross-site-scripting-xss