CVE Catalog
CVE-2024-57370
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.31%
23th percentile - higher than 23% of all known CVEs
Summary
A Cross-Site Scripting (XSS) vulnerability was found in sunnygkp10 Online Exam System master version. It allows a remote attacker to steal sensitive information via the 'w' parameter.
Risk Assessment
An attacker can hijack user sessions, login credentials, or other confidential data, leading to data breaches and privacy violations.
Recommendation
Immediately update the system to the latest version or apply a security patch against XSS. Additionally, implement input filtering and validation for the 'w' parameter.
Original NVD description (English source)
Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter.