CVE-2024-13017
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 29, 2024
Updated: Feb 18, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-13017 is a recently identified vulnerability in the PHPGurukul Maid Hiring Management System 1.0. This issue poses a risk to the affected code in the file /admin/aboutus.php, specifically the About Us Page component. Manipulation of the title argument can lead to a cross-site scripting (XSS) attack, allowing remote attackers to inject malicious scripts into unsuspecting users' browsers. This vulnerability requires immediate attention and patching to prevent potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.