CVE-2024-13075

Summary

CVE-2024-13075 is a recently disclosed vulnerability affecting the PHPGurukul Land Record System 1.0. The issue lies in the manipulation of the argument "Land Property Type" in the file "/admin/add-propertytype.php." This vulnerability results in Cross-Site Scripting (XSS), allowing remote attackers to inject malicious code into the web application. Successful exploitation of this vulnerability can lead to unintended execution of malicious scripts on unsuspecting users' browsers. Organizations utilizing the PHPGurukul Land Record System 1.0 are advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.