4 matches found
CVE-2024-25224
CVE-2024-25224 affects Simple Admin Panel App v1.0, with a cross-site scripting (XSS) vulnerability in the Add Size function, exploitable via crafted payloads to the Size Number parameter. Root cause is improper handling of input in that parameter, enabling arbitrary web script/HTML execution. Th...
CVE-2024-12933
The CVE-2024-12933 entry concerns code-projects Simple Admin Panel 1.0. Affected component: updateItemController.php; root cause: manipulation of the arguments p_name and p_desc enables cross-site scripting (XSS). A remote attacker could exploit this via the affected API endpoint. Documents consi...
CVE-2024-12932
The CVE-2024-12932 affects Code-Projects Simple Admin Panel 1.0, specifically the addSizeController.php file. The vulnerability arises from manipulating the size parameter, which leads to cross-site scripting (XSS). The issue can be exploited remotely. Available connected documents confirm the co...
CVE-2024-12930
The CVE-2024-12930 entry concerns code-projects Simple Admin Panel 1.0. The vulnerable component is addCatController.php, where manipulation of the c_name argument enables cross-site scripting (XSS). Reports indicate the issue can be exploited remotely. Affected product/version: code-projects Sim...