CVE-2024-30987

published 2024-04-17

CVE-2024-30987: Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute…

Priority P4 30 medium 6.8 CVSS 3.1

AV N AC L PR L UI R S U C L I H A L

Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	client_management_system	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79