CVE-2024-12995

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/050-9000000000000001/tasks of the component Project Tasks Section. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-79CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Dec 28, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-129986.1A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part CVE-2024-129999.8A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /CVE-2024-13005.4A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unCVE-2024-130009.8A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /adCVE-2024-130019.8A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admiCVE-2024-130029.8A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerabilityCVE-2024-130039.8A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is somCVE-2024-130049.8A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the filCVE-2024-130059.8A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknCVE-2024-130069.8A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects CVE-2024-130079.8A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of theCVE-2024-130089.8A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Affected by this vulnerability is an u
CVE-2024-12995: Low severity, CVSS 3.5 | Vulnix