← Database

CVE-2024-40478

MEDIUM CVSS: 5.4 Published: 2024-08-12 Modified: 2026-06-17

Description

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields

Affected Platforms

Jayesh Online Exam System

Weakness Type

CWE-79, CWE-79

References