CVE-2024-33989 Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'eventdate' and 'events'...

CVE-2024-33989

The CVE-2024-33989 entry describes a Cross-Site Scripting (XSS) vulnerability in School Event Management System 1.0. The issue arises from untrusted input in the port/event_print.php endpoint, specifically the eventdate and events parameters, enabling an authenticated user’s browser session to be...