CVE-2024-54935

Summary

CVE-2024-54935 is a stored Cross-Site Scripting (XSS) vulnerability affecting the /send_message_teacher_to_student.php file in the kashipara E-learning Management System version 1.0. This issue enables remote attackers to inject and execute malicious scripts by manipulating the my_message parameter, potentially leading to data theft, session hijacking, or other forms of unauthorized access. This vulnerability poses a significant risk and necessitates immediate system updates or patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.