CVE-2024-30989

2024-04-1700:00:00

mitre

github.com

cross site scripting

phpgurukul

client management system

php

mysql

AI Score

7.4

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the “cname”, “comname”, “state” and “city” parameter.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:phpgurukul:client_management_system:-:*:*:*:*:*:*:*"
    ],
    "vendor": "phpgurukul",
    "product": "client_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "-"
      }
    ],
    "defaultStatus": "unknown"
  }
]