CVE-2024-46336

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

CVE-2024-46336

The kashipara School Management System 1.0 is vulnerable to Cross-Site Scripting (XSS) due to an unvalidated parameter in the /client_user/feedback.php endpoint. An attacker can inject malicious scripts into the application through this file, potentially impacting users interacting with the feedb...

Novel-Plus SQL Injection Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and earlier versions, which stems from an SQL injection vulnerability in the path /novel/userFeedback/list...