CVE-2024-12883
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 21, 2024
Updated: Jan 10, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-12883 is a newly disclosed vulnerability affecting the Job Recruitment 1.0 software by code-projects. This issue lies within an unidentified functionality of the file _email.php, which can be exploited through manipulation of the email argument. The attack can be executed remotely, leading to cross-site scripting. The exploit is now public, making it a potential threat to users who have not yet applied a patch or mitigation strategy.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Job Recruitment
Affected Vendors
- Code Projects
- Anisha