CVE-2024-40487

A Stored Cross Site Scripting XSS vulnerability was found in "/viewtype.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType parameter...

CVE-2024-40487

A Stored Cross Site Scripting (XSS) vulnerability exists in the Kashipara Live Membership System v1.0 within the "/view_type.php" endpoint. The flaw allows remote attackers to execute arbitrary code by exploiting the membershipType parameter. To mitigate this risk, it is recommended to disable ac...