CVE-2024-30988

Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar...

CVE-2024-30988

Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar...

CVE-2024-30988

The phpgurukul Client Management System (version 1.1) is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the /search-invoices.php endpoint. The root cause is the improper neutralization of input during web page generation, specifically within the Search bar . This flaw allows an attac...