CVE-2024-4256

Summary

CVE-2024-4256 is a recently disclosed vulnerability affecting Techkshetra Info Solutions Savsoft Quiz 6.0. The issue lies in the functionality of the file /public/index.php/Qbank/editCategory within the Category Page component. Manipulation of the argument category_name with <script>alert('XSS'))</script> input can lead to Cross-Site Scripting (XSS), enabling remote attacks. The vendor, who was contacted earlier about the disclosure, has not responded. The identifier for this vulnerability is VDB-262148.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.