CVE-2024-53481

MediumCVSS 6.1/10Last modified Jul 5, 2026

Description

A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "Last name" parameters.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Dec 10, 2024
Last modified: Jul 5, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-534848.8Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key.CVE-2024-53498.8The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3 CVE-2024-534907.5Favorites-web 1.3.0 favorites-web has a directory traversal vulnerability in SecurityFilter.java.CVE-2024-534947.5Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authenti CVE-2024-534957.5Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authent CVE-2024-534969.8Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authenti CVE-2024-534999.8Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.CVE-2024-53509.8A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the f CVE-2024-535023.8Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS_SeoAndTag.php page.CVE-2024-535049.8A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory.CVE-2024-535059.8A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent.CVE-2024-535069.8A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs.