Vulnerability — CVE-2024-2526

CVE-2024-2526

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-2526
Description:: A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/rooms.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256963. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Last updated date:: 03/03/2025

Type:: exploit
Confidence:: HIGH
Date of publishing:: 03/03/2025
Reference url to background: https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Reflected%20XSS%20-%20rooms.php.md