CVE-2024-46336

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

CVE-2024-46336

The kashipara School Management System version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to an unvalidated parameter in the /client_user/feedback.php endpoint. An attacker could inject malicious scripts into the application through this specific file. As a workaround, it is recommended ...

Novel-Plus SQL Injection Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and earlier versions, which stems from an SQL injection vulnerability in the path /novel/userFeedback/list...