CVE-2024-3090

Summary

CVE-2024-3090 is a recently disclosed vulnerability affecting the PHPGurukul Emergency Ambulance Hiring Portal 1.0. This issue lies in the Add Ambulance Page's /admin/add-ambulance.php component and arises from inadequately validated user input, leading to cross-site scripting (XSS). The manipulation of the Ambulance Reg No or Driver Name argument can trigger this vulnerability, potentially allowing remote attackers to inject malicious scripts. The exploit for this vulnerability has been publicly disclosed, increasing the risk of potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.