CVE-2024-45986

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-09-26 · updated 2026-06-17
Weakness: CWE-79

Description

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.

Affected products

Projectworlds Pvt. Limited Online Voting System Project: 1.0

References

https://github.com/soursec/CVEs/tree/main/CVE-2024-45986

Get alerted when CVE-2024-45986 or the next vulnerability affects your stack