CVEvulnerability
CVE-2024-3320
6.1 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-04-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A vulnerability was found in SourceCodester eLearning System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument page leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-259388.
Affected configurations
• oretnom23 elearning system 1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/qqqyc/vuln/blob/main/eLearning%20System-XSS-01.md Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.259388 Permissions Required, VDB Entry
- https://vuldb.com/?id.259388 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.310103 Third Party Advisory, VDB Entry
- https://github.com/qqqyc/vuln/blob/main/eLearning%20System-XSS-01.md Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.259388 Permissions Required, VDB Entry
- https://vuldb.com/?id.259388 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.310103 Third Party Advisory, VDB Entry