CVE-2024-12883

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Dec 21, 2024
Updated: Jan 10, 2025
CWE ID 94
CWE ID 79

Summary

CVE-2024-12883 is a newly disclosed vulnerability affecting the Job Recruitment 1.0 software by code-projects. This issue lies within an unidentified functionality of the file _email.php, which can be exploited through manipulation of the email argument. The attack can be executed remotely, leading to cross-site scripting. The exploit is now public, making it a potential threat to users who have not yet applied a patch or mitigation strategy.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Job Recruitment

Affected Vendors

  • Code Projects
  • Anisha