CVE-2024-4676

CVSS 2.0 Score 4.0 of 10 (medium)

Details

Published May 14, 2024
Updated: Jun 4, 2024
CWE ID 79

Summary

CVE-2024-4676 is a newly disclosed vulnerability affecting the Campcodes Complete Web-Based School Management System version 1.0. The issue lies in the processing of the file /view/range_grade_text.php, where a manipulation of the argument count leads to cross-site scripting (XSS). An attacker can exploit this vulnerability remotely, making it a significant security concern. The exploit has been made public, increasing the risk of potential attacks. Vulnerability Database has assigned the identifier VDB-263597 to this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share