CVE-2024-12980
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Feb 18, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-12980 is a newly identified vulnerability affecting the code-projects Job Recruitment 1.0. The issue lies within the fln_update function in /_parse/_all_edits.php, which is deemed problematic. attackers can manipulate the fname/lname argument to launch a cross-site scripting (XSS) attack. Remotely executing this exploit is possible. The vulnerability has been made public, increasing the risk of its exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Job Recruitment
Affected Vendors
- Code Projects
- Anisha