CVE-2024-7285

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/ajax.php?action=save_settings. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273154 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jul 31, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-72869.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This issue affects some CVE-2024-72878.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an CVE-2024-72888.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critical. Affected by this CVE-2024-72898.8A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been rated as critical. Affected by this iss CVE-2024-72908.8A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. This affects an unknown CVE-2024-72917.2The JetFormBuilder plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.4.1. This is due to CVE-2024-72928.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restr CVE-2024-72938.8In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak passwo CVE-2024-72946.5In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without r CVE-2024-72956.2In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm whi CVE-2024-72962.7An issue was discovered in GitLab EE affecting all versions from 16.5 prior to 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2 which CVE-2024-72978.8Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged attacker to gain su