CVE-2024-33976

CVSS V2 None CVSS V3 None
Description
Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'id' parameter in '/admin/user/index.php'.
Overview
  • CVE ID
  • CVE-2024-33976
  • Assigner
  • INCIBE
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-08-06T10:56:09.762Z
  • Last Modified Date
  • 2024-08-06T13:16:18.699Z
History
Created Old Value New Value Data Type Notes
2024-08-07 13:12:58 Added to TrackCVE