CVE-2024-41242

Summary

CVE-2024-41242 is a Reflected Cross Site Scripting (XSS) vulnerability identified in the /smsa/student_login.php file of the Kashipara Responsive School Management System version 3.2.0. This issue permits remote attackers to inject and execute malicious scripts through the "error" parameter. Successful exploitation could lead to unintended execution of code and potential data theft or system takeover. Users are advised to update their systems as soon as a patch is available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.