CVE-2024-40481

Summary

CVE-2024-40481 is a stored Cross-Site Scripting (XSS) vulnerability affecting the PHPGurukul Old Age Home Management System v1.0. The issue lies in the "/admin/view-enquiry.php" file, where the Contact Us page's "message" parameter can be exploited by remote attackers. Successful exploitation enables the execution of arbitrary code. This vulnerability poses a significant risk as it allows attackers to inject malicious scripts into the web application, potentially leading to unauthorized data access, system compromise, or user manipulation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.