CVE-2024-50841

Published: 2024-11-14T14:15Z

Last Modified: 2024-11-15T13:58Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the date_start, date_end, and title parameters. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt