CVE-2024-30987

Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters.

CVSS v3.1

6.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L

EPSS

0.58% chance of exploitation in the next 30 days, 45th percentile

Published

2024-04-17

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://medium.com/%40shanunirwan/cve-2024-30987-multiple-stored-cross-site-scripting-vul…

References

• CVE Record
• NVD entry

Related

• CVE-2024-30986
• CVE-2024-30988
• CVE-2024-30985
• CVE-2024-30989
• CVE-2024-30981
• CVE-2024-30990