CVE-2024-55268

Summary

CVE-2024-55268 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the PHPGurukul COVID 19 Testing Management System 1.0. The issue is located in the /covidtms/registered-user-testing.php file, where the regmobilenumber parameter is susceptible to remote code execution. An attacker can exploit this vulnerability by injecting malicious scripts, potentially leading to unauthorized access or data theft. This could pose a significant risk to organizations using this system if not addressed promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.