PT-2024-16741 · Unknown · Code-Projects Job Recruitment

Unrealdawn · CVE-2024-11078 · Published 2024-11-11 · Updated 2025-09-30

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Job Recruitment version 1.0

Description A high-severity vulnerability has been identified in code-projects Job Recruitment. The vulnerability affects an unknown functionality of the file /register.php. The manipulation of the argument e/role leads to cross-site scripting. The attack can be launched remotely.

Recommendations To mitigate risks, update to the latest version of code-projects Job Recruitment. As a temporary workaround, consider restricting access to the /register.php file until a patch is available. Avoid using the e/role argument in the affected file until the issue is resolved.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2024-11078

Affected Products

Code-Projects Job Recruitment

References · 31

• 🔥 https://github.com/UnrealdDei/cve/blob/main/xss.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-11078 · Security Note
• https://osv.dev/vulnerability/CVE-2024-11078 · Vendor Advisory
• https://vuldb.com/?ctiid.283873 · Note
• https://twitter.com/transilienceai/status/1857478791867805716 · Twitter Post
• https://vuldb.com/?id.283873 · Note
• https://twitter.com/transilienceai/status/1857291962346348855 · Twitter Post
• https://twitter.com/transilienceai/status/1857478782128632126 · Twitter Post
• https://twitter.com/transilienceai/status/1857291938757546346 · Twitter Post
• https://twitter.com/transilienceai/status/1857478798788460645 · Twitter Post
• https://twitter.com/transilienceai/status/1857291981380063304 · Twitter Post
• https://twitter.com/transilienceai/status/1857478805520265663 · Twitter Post
• https://twitter.com/transilienceai/status/1857478768870433107 · Twitter Post
• https://t.me/cvedetector/10539 · Telegram Post
• https://twitter.com/transilienceai/status/1857291954444288362 · Twitter Post