CVE-2024-53481

MediumCVSS 6.1

Published: 10/12/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

38th percentile - higher than 38% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability was found in the profile.php of PHPGurukul Beauty Parlour Management System v1.1. Attackers can inject arbitrary HTML into the 'Firstname' and 'Last name' parameters, allowing remote code execution.

Risk Assessment

The risk includes session hijacking, admin account takeover, or malware distribution through injected HTML/JavaScript code.

Recommendation

Immediately update the system to the latest version or apply input filtering (e.g., htmlspecialchars) on the 'Firstname' and 'Last name' parameters in profile.php.

Original NVD description (English source)

A Cross Site Scripting (XSS) vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "Last name" parameters.