CVE-2024-30986

2024-04-1700:00:00

mitre

github.com

cross site scripting

phpgurukul

client management system

arbitrary code

price parameter

sname parameter

AI Score

7.6

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and via “price” and “sname” parameter.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:phpgurukul:client_management_system:-:*:*:*:*:*:*:*"
    ],
    "vendor": "phpgurukul",
    "product": "client_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "1.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]