CVE-2024-40484

Summary

CVE-2024-40484 is a Reflected Cross Site Scripting (XSS) vulnerability affecting the "/oahms/search.php" file in the PHPGurukul Old Age Home Management System v1.0. This issue allows remote attackers to inject and execute malicious code in users' browsers by manipulating the "searchdata" parameter. Successful exploitation could lead to unintended actions, such as session hijacking or data theft, putting the confidentiality, integrity, and availability of affected systems at risk. Users are urged to update their systems as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.