CVE-2024-0726

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin_login.php of the component Admin Login Module. The manipulation of the argument msg with the input test%22%3Cscript%3Ealert(%27Torada%27)%3C/script%3E leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251549 was assigned to this vulnerability.

• CWE-79
• CWE-79

• https://torada.notion.site/Reflected-Cross-site-scripting-at-Project-Allocation-System-d94c7c489c2d48efa23b21a90dd0e03f?pvs=4Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.251549Permissions Required, Third Party Advisory
• https://vuldb.com/?id.251549Third Party Advisory
• https://torada.notion.site/Reflected-Cross-site-scripting-at-Project-Allocation-System-d94c7c489c2d48efa23b21a90dd0e03f?pvs=4Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.251549Permissions Required, Third Party Advisory
• https://vuldb.com/?id.251549Third Party Advisory

Published

Jan 19, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0719The Tabs Shortcode and Widget WordPress plugin through 1.17 …5.4
• CVE-2024-0720A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2024-0721A vulnerability has been found in Jspxcms 10.2.0 and classif…6.1
• CVE-2024-0722A vulnerability was found in code-projects Social Networking…5.4
• CVE-2024-0723A vulnerability was found in freeSSHd 1.0.9 on Windows. It h…7.5
• CVE-2024-0725A vulnerability was found in ProSSHD 1.2 on Windows. It has …7.5
• CVE-2024-0727Issue summary: Processing a maliciously formatted PKCS12 fil…5.5
• CVE-2024-0728A vulnerability classified as problematic was found in ForU …9.8
• CVE-2024-0729A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-0730A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-0731A vulnerability has been found in PCMan FTP Server 2.0.7 and…7.5
• CVE-2024-0732A vulnerability was found in PCMan FTP Server 2.0.7 and clas…7.5