medium5.4
CVE-2024-45986
A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a mali…
Impact
A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectworlds | Online Voting System Project | Version 1.0 |