2 matches found
CVE-2024-51209: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS vulnerabilities in Anuj Kumar's Client Management System Version 1.2 allow local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page...
5.4CVSS5.9AI score0.00267EPSS
SaveExploits1References1
PT-2024-34561
Name of the Vulnerable Software and Affected Versions Anuj Kumar's Client Management System version 1.2 Description The issue allows local attackers to inject arbitrary web script or HTML via the search input field parameter to admin search invoice page and client search invoice page. This is a...
5.4CVSS0.00267EPSS
SaveExploits1References7
20