CVE-2024-30987

Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters...

CVE-2024-30987

The phpgurukul Client Management System version 1.1 (using PHP & MySQL) contains a Cross-Site Scripting (XSS) vulnerability in the /bwdates-reports-ds.php API endpoint. The root cause is the improper neutralization of input during web page generation, specifically involving the fromdate and todat...