Medium · 6.1 CVE-2024-46470 EUVD-2024-41851GHSA-2wpc-6fxg-xpcf

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membe…

Published Sep 27, 2024 · Updated Sep 27, 2024 · Assigned by mitre

Description

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in the edit-type.php component.

References

https://codeastro.com/membership-management-system-in-php-with-source-code/
https://github.com/JonMoriSenpai/CVE-WriteUps/blob/main/CodeAstro%20-%20MembershipM-PHP/CVE-2024-46470/writeup.md