CVE-2024-24099

CVE-2024-24099 affects Code-projects Scholars Tracking System 1.0. Multiple sources (NVD, Red Hat, CNVD, CNVD-like entries, CVE list) describe a SQL Injection vulnerability in the Employment Status Information Update. Root cause: lack of validation for externally supplied SQL statements. Impact i...

CVE-2024-24097

CVE-2024-24097 involves a Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 . The issue stems from insufficient input filtering/escaping in the News Feed, allowing an attacker to inject and execute arbitrary scripts in a victim’s browser. Multiple connected so...