Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-24945

Published: 01/02/2024 Updated: 07/02/2024
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
Subscribe to Remyandrade

Vulnerability Summary

A stored cross-site scripting (XSS) vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Share Your Moments parameter at /travel-journal/write-journal.php.

Vulnerable Product Search on Vulmon Subscribe to Product

remyandrade travel journal using php and mysql with source code 1.0

References

CWE-79https://portswigger.net/web-security/cross-site-scriptinghttps://github.com/tubakvgc/CVE/blob/main/Travel_Journal_App.mdhttps://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook