← Database

CVE-2024-51328

MEDIUM CVSS: 6.1 Published: 2024-11-04 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.

Affected Platforms

Projectworlds Travel Management System

Weakness Type

CWE-79

References