CVE-2024-2525

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/receipt.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-256962 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-252509.8SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page.CVE-2024-252518.8code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control.CVE-2024-252537.5Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module.CVE-2024-252549.8SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter.CVE-2024-252559.8Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties rep CVE-2024-25266.1A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. Affected by thi CVE-2024-252604.0elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.CVE-2024-252628.1texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows atta CVE-2024-252697.5libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service atta CVE-2024-25278.8A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. Affected by this issue CVE-2024-252704.3An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference (IDOR) vulnerability by manipulat CVE-2024-252749.8An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code