CVE-2024-1265

Summary

CVE-2024-1265 is a newly disclosed vulnerability affecting the CodeAstro University Management System 1.0. The vulnerability lies within an unknown function of the /att_add.php file in the Attendance Management component. Manipulation of the argument "Student Name" can trigger cross-site scripting (XSS), allowing an attacker to inject malicious code. The attack can be launched remotely, increasing the potential threat. The exploit for this vulnerability (VDB-253008) has been made public, increasing the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.