Security Advisory

CVE-2024-45986

5.4
MEDIUM

Vulnerability Description

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.
Published Date September 26, 2024
Official Source NIST NVD Advisory