CVE-2024-24945

CVE-2024-24945 describes a stored XSS in Travel Journal Using PHP and MySQL with Source Code v1.0. The vulnerability affects the “Share Your Moments” input (endpoint /travel-journal/write-journal.php), where crafted payloads can be stored and executed in a victim’s browser, allowing arbitrary web...