CVE-2024-48246

Vehicle Management System 1.0 contains a Stored Cross-Site Scripting XSS vulnerability in the "Name" parameter of /vehicle-management/booking.php...

CVE-2024-48246

creationtimestamp| type| source ---|---|--- 2025-03-05 19:59:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljnrds4wdd2h 2025-03-05 22:47:49+00:00| seen| https://t.me/cvedetector/19658 2025-03-06 15:10:41+00:00| published-proof-of-concept|...

CVE-2024-48246

Vehicle Management System 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in the Name parameter of the /vehicle-management/booking.php endpoint. A malicious actor can inject payloads that are stored and subsequently executed when an administrator views the booking list at /vehicle-m...

CVE-2024-48246

Vehicle Management System 1.0 contains a Stored Cross-Site Scripting XSS vulnerability in the "Name" parameter of /vehicle-management/booking.php...