CVE-2024-4521

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teacher_salary_details2.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263124.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%208.pdfExploit
• https://vuldb.com/?ctiid.263124Permissions Required, VDB Entry
• https://vuldb.com/?id.263124Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.329767Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%208.pdfExploit
• https://vuldb.com/?ctiid.263124Permissions Required, VDB Entry
• https://vuldb.com/?id.263124Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.329767Third Party Advisory, VDB Entry

Published

May 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45203Improper authorization in handler for custom URL scheme issu…4.3
• CVE-2024-45204A vulnerability exists where a low-privileged user can explo…4.3
• CVE-2024-45205An Improper Certificate Validation on the UniFi iOS App mana…7.1
• CVE-2024-45206A vulnerability in Veeam Service Provider Console has been i…6.5
• CVE-2024-45207DLL injection in Veeam Agent for Windows can occur if the sy…7
• CVE-2024-45208The Versa Director SD-WAN orchestration platform which makes…9.8
• CVE-2024-45216Improper Authentication vulnerability in Apache Solr. Solr …9.8
• CVE-2024-45217Insecure Default Initialization of Resource vulnerability in…8.1
• CVE-2024-45219Account users in Apache CloudStack by default are allowed to…8.5
• CVE-2024-4522A vulnerability classified as problematic was found in Campc…6.1
• CVE-2024-45229The Versa Director offers REST APIs for orchestration and ma…6.6
• CVE-2024-4523A vulnerability, which was classified as problematic, has be…6.1