CVE-2024-0467

The CVE-2024-0467 entry concerns code-projects’ Employee Profile Management System 1.0. The vulnerability affects the edit_position_query.php function, where manipulating the pos_name argument enables cross-site scripting (XSS). It is described as exploitable remotely, with the exploit disclosed ...

CVE-2024-0467 code-projects Employee Profile Management System edit_position_query.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpositionquery.php. The manipulation of the argument posname leads to cross site scripting. It is possible to launch the attack...