CVE-2024-30988

Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar...

CVE-2024-30988

Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar...

CVE-2024-30988

The CVE-2024-30988 entry describes a Cross Site Scripting (XSS) vulnerability in phpgurukul Client Management System v1.1, specifically in the /search-invoices.php endpoint. The root cause is an XSS flaw in the search bar that can allow an attacker to execute arbitrary code and access sensitive i...