2 matches found
CVE-2024-8473: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through useremail parameter in /jobportal/admin/login.php...
6.3CVSS5.9AI score0.00278EPSS
SaveExploits0References1
PT-2024-39040
Name of the Vulnerable Software and Affected Versions: Jobportal versions affected versions not specified Description: A Cross-Site Scripting XSS issue exists due to insufficient encryption of user-controlled input. This could allow an attacker to retrieve the session details of an authenticated...
6.3CVSS0.00278EPSS
SaveExploits0References7
20