{ "id": "CVE-2024-34224", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-14T15:38:36.660", "lastModified": "2024-05-14T16:12:23.490", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters." }, { "lang": "es", "value": "Vulnerabilidad de Cross Site Scripting en /php-lms/classes/Users.php?f=save en Computer Laboratory Management System usando PHP y MySQL 1.0 permite a atacantes remotos inyectar script web o HTML de su elecci\u00f3n a trav\u00e9s de los par\u00e1metros de nombre, segundo nombre y apellido." } ], "metrics": {}, "references": [ { "url": "https://github.com/dovankha/CVE-2024-34224", "source": "cve@mitre.org" } ] }