CVE-2024-1031

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file templates/5-Add-Expenses.php of the component Add Expenses Page. The manipulation of the argument item leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252304.

• CWE-79

• https://docs.qq.com/doc/DYmhqV3piekZ5dlZiPermissions Required
• https://vuldb.com/?ctiid.252304Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252304Third Party Advisory, VDB Entry
• https://docs.qq.com/doc/DYmhqV3piekZ5dlZiPermissions Required
• https://vuldb.com/?ctiid.252304Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252304Third Party Advisory, VDB Entry

Published

Jan 30, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10302The user self-signup flow in multiple WSO2 products fails to…5.8
• CVE-2024-10305Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-10306A vulnerability was found in mod_proxy_cluster. The issue is…5.4
• CVE-2024-10307An issue has been discovered in GitLab EE/CE affecting all v…5.5
• CVE-2024-10308The Jeg Elementor Kit plugin for WordPress is vulnerable to …5.4
• CVE-2024-10309The Tracking Code Manager WordPress plugin before 2.4.0 does…5.9
• CVE-2024-10310The Element Pack Elementor Addons (Header Footer, Template L…5.4
• CVE-2024-10311The External Database Based Actions plugin for WordPress is …8.8
• CVE-2024-10312The Exclusive Addons for Elementor plugin for WordPress is v…4.3
• CVE-2024-10313iniNet Solutions SpiderControl SCADA PC HMI Editor has a pat…8.6
• CVE-2024-10314In Helix Core versions prior to 2024.2, an unauthenticated r…8.7
• CVE-2024-10315In Gliffy Online an insecure configuration was discovered in…6.9