CVE-2024-13076

Summary

CVE-2024-13076 is a newly disclosed vulnerability affecting the PHPGurukul Land Record System version 1.0. The issue lies in the processing of the file /admin/edit-propertytype.php, which can be exploited through manipulation of the Property Type argument. This results in cross-site scripting (XSS), allowing attackers to inject malicious code into web pages viewed by other users. The exploit can be initiated remotely, increasing the risk to affected systems. Users are advised to update their software as soon as a patch is available to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.