CVE-2024-10840

Summary

CVE-2024-10840 is a newly identified vulnerability affecting the romadebrian WEB-Sekolah 1.0 software. The issue lies within an unspecified function of the /Admin/akun_edit.php component in the Backend, which can be exploited through manipulation of the argument "kode." This vulnerability results in Cross-Site Scripting (XSS), allowing an attacker to inject malicious code into a user's web browser. The attack can be launched remotely, increasing the potential threat to systems utilizing this software. The exploit for this vulnerability has been made public, increasing the risk of its exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.