PT-2024-16741 · Unknown · Code-Projects Job Recruitment

Unrealdawn

·

Published

2024-11-11

·

Updated

2025-09-30

·

CVE-2024-11078

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions code-projects Job Recruitment version 1.0
Description A high-severity vulnerability has been identified in code-projects Job Recruitment. The vulnerability affects an unknown functionality of the file /register.php. The manipulation of the argument e/role leads to cross-site scripting. The attack can be launched remotely.
Recommendations To mitigate risks, update to the latest version of code-projects Job Recruitment. As a temporary workaround, consider restricting access to the /register.php file until a patch is available. Avoid using the e/role argument in the affected file until the issue is resolved.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79CWE-94

Related Identifiers

CVE-2024-11078

Affected Products

Code-Projects Job Recruitment