CVE-2024-40576 — Cross-site Scripting in Best House Rental Management System

CWE-79 — Cross-site Scripting2 documents2 sources

Severity

4.7MEDIUMNVD

EPSS

0.4%

top 37.50%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mayurik Best House Rental Management System

Timeline

PublishedJul 29

Description

Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "Description" parameters in the houses page at the index.php component.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

▶NVDmayurik/best_house_rental_management_system1.0

🔴Vulnerability Details

CVEList

CVE-2024-40576: Cross Site Scripting vulnerability in Best House Rental Management System 1↗2024-07-29

▶