CVE-2024-46336

CVE-2024-46336 affects Kashipara School Management System 1.0. The vulnerability is a Cross Site Scripting (XSS) flaw in /client_user/feedback.php caused by an unvalidated parameter. The issue is documented across Red Hat, NVD, CNNVD and CVE listings with a CVSS v3.1 base score of 6.1 (Medium). N...

CVE-2024-46334

CVE-2024-46334 affects Kashipara School Management System 1.0. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable through the parameters formuser and formpassword in /adminLogin.php . The root cause is unvalidated/sanitized user input in this login endpoint, enabling scripts to be...