Unrated severityNVD Advisory· Published Sep 27, 2024· Updated Sep 27, 2024

CVE-2024-46470

Description

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in the edit-type.php component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Codeastro/Gym Management Systemcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 1.0

Patches

Vulnerability mechanics

References

codeastro.com/membership-management-system-in-php-with-source-code/mitre
github.com/JonMoriSenpai/CVE-WriteUps/blob/main/CodeAstro%20-%20MembershipM-PHP/CVE-2024-46470/writeup.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000