CVE-2024-57175

Summary

CVE-2024-57175 is a stored Cross-Site Scripting (XSS) vulnerability affecting the PHPGURUKUL Online Birth Certificate System v1.0. Malicious scripts can be injected into the profile name field and stored in the database. When a user views their own or someone else's profile, the malicious script is executed, potentially leading to unauthorized access or data theft. Attackers can exploit this vulnerability to steal sensitive information or inject malware. Users are advised to update their systems as soon as a patch is available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.