CVE-2024-51328

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-51328
Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.
CVSS

No CVSS.

References
Link Resource
https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51328%20-%20Stored%20XSS%20 Exploit Third Party Advisory
https://projectworlds.in/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:projectworlds:travel_management_system:1.0:*:*:*:*:*:*:*
History

07 May 2025, 15:28

Type Values Removed Values Added
First Time Projectworlds
Projectworlds travel Management System
References () https://projectworlds.in/ - () https://projectworlds.in/ - Product
References () https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51328%20-%20Stored%20XSS%20 - () https://github.com/redtrib3/CVEs/tree/main/CVE-2024-51328%20-%20Stored%20XSS%20 - Exploit, Third Party Advisory
CPE cpe:2.3:a:projectworlds:travel_management_system:1.0:*:*:*:*:*:*:*

04 Nov 2024, 18:50

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-04 18:15

Updated : 2025-05-07 15:28

NVD link : CVE-2024-51328

Mitre link : CVE-2024-51328

JSON object : View

Products Affected

projectworlds

  • travel_management_system
CWE

No CWE.