low
advisory
oretnom23 Computer Laboratory Management System: Stored XSS (CVE-2024-34225)
A stored Cross-Site Scripting (XSS) vulnerability exists in the Computer Laboratory Management System 1.0. The vulnerability allows remote attackers to inject arbitrary web scripts or HTML via the 'name' and 'shortname' parameters in the '/admin/?page=system_info' endpoint.
CVE search metadata
CVE search record: CVE-2024-34225. Severity: medium. CVSS: 6.1. EPSS: 0.57%. KEV: no. Product: Computer Laboratory Management System (1.0). Brief: oretnom23 Computer Laboratory Management System: Stored XSS (CVE-2024-34225). Brief link: https://feed.craftedsignal.io/briefs/2026-10-cve-2024-34225/
Triage facts
Revision 1- Applicability
- Computer Laboratory Management System (1.0)
- Evidence
- Unknown
- Severity
- Low
- Sources
- 2 public sources
- Freshness
- Revision 1Oct 27, 04:13 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3