CVE-2024-4684

Summary

CVE-2024-4684 is a recently disclosed vulnerability affecting the Campcodes Complete Web-Based School Management System version 1.0. This issue, classified as problematic, lies in the file /view/exam_timetable_grade_wise.php. An attacker can exploit this vulnerability by manipulating the 'exam' argument, leading to cross-site scripting (XSS). The attack can be initiated remotely, making it a significant security concern. The exploit for this vulnerability has been made public, increasing the risk of its usage in cyber attacks. The Vulnerability Database has assigned the identifier VDB-263625 to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.