CVE-2024-1825
A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0.
Does this matter?
Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This affects an unknown part of the component User Registration Page. The manipulation of the argument address with the input <img src="1" onerror="console.log(1)"> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254613 was assigned to this vulnerability.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.48% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- codeastro/house rental management system
- Source
- cna@vuldb.com
References
- https://docs.qq.com/doc/DYndSY3V4UXh4dHFCPermissions Required
- https://vuldb.com/?ctiid.254613Permissions Required
- https://vuldb.com/?id.254613Third Party Advisory
- https://docs.qq.com/doc/DYndSY3V4UXh4dHFCPermissions Required
- https://vuldb.com/?ctiid.254613Permissions Required
- https://vuldb.com/?id.254613Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.