CVE-2024-4649

Summary

CVE-2024-4649: A newly disclosed vulnerability affects the Campcodes Complete Web-Based School Management System 1.0. An unknown portion of the file /view/student_exam_mark_insert_form1.php contains a cross-site scripting (XSS) issue. This vulnerability is triggered by manipulation of the page argument, allowing remote attackers to execute malicious scripts. The exploit has been made public, increasing the risk of potential attacks. Vulnerability identifier VDB-263493 has been assigned to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.