CVE-2024-12790
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Dec 19, 2024
CWE ID 94
CWE ID 79
Summary
CVE-2024-12790 is a newly disclosed vulnerability affecting the code-projects Hostel Management Site 1.0. The issue lies within the room-details.php file, where unknown code has been identified as risky. This vulnerability facilitates cross-site scripting attacks, allowing an attacker to inject malicious scripts into a user's browser. The exploitation can be carried out remotely, making it a significant threat. Since the exploit has been made public, it may be used maliciously.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.