CVE-2024-33984

Summary

CVE-2024-33984 is a Cross-Site Scripting (XSS) vulnerability identified in the School Attendance Monitoring System and School Event Management System versions 1.0. This issue allows an attacker to craft a malicious URL and send it to a victim. Upon the victim accessing the URL, an attacker can steal their session cookie through the 'Attendance', 'attenddate', and 'YearLevel' parameters present in '/AttendanceMonitoring/report/index.php'. This poses a significant risk for unauthorized access to user accounts and sensitive information. Users are strongly advised to update their systems to the latest version or implement appropriate security measures to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.