CVE-2024-33985

Summary

CVE-2024-33985 is a Cross-Site Scripting (XSS) vulnerability affecting the School Attendance Monitoring System and School Event Management System with version 1.0. This issue allows an attacker to craft a malicious URL and send it to a victim. Upon opening the URL, the attacker can steal the victim's session cookie using the 'View' parameter within the '/course/index.php' file, potentially gaining unauthorized access to the user's account. This vulnerability poses a significant risk to user privacy and security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.