cbcvebase.
CVE-2024-8473
published 2024-09-05

CVE-2024-8473: Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an…

medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through user_email parameter in /jobportal/admin/login.php.

Affected

1 ranges
VendorProductVersion rangeFixed in
phpgurukuljob_portal——