CVE-2024-25551

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Cross Site Scripting (XSS) vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to execute arbitrary code via crafted GET request to web application URL.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://medium.com/%40jose.inaciot/my-first-cve-cve-2024-25551-f91787c05ae9Permissions Required
https://medium.com/%40jose.inaciot/my-first-cve-cve-2024-25551-f91787c05ae9Permissions Required

Timeline

Published: Mar 3, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-255527.8A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.CVE-2024-255594.7URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator CVE-2024-25569.8A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown CVE-2024-255607.5When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate. N CVE-2024-255617.8Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user CVE-2024-255626.6Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to poten CVE-2024-255633.4Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow CVE-2024-255653.8Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial CVE-2024-255666.1An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow CVE-2024-255678.8Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specif CVE-2024-255688.8OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS CVE-2024-255696.5An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A special