VULNERABILITY INTELLIGENCE
CVE-2024-54936
CVSS score5.4 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2024-12-09
Last modified2026-06-17
Description
A Stored Cross-Site Scripting (XSS) vulnerability was found in /send_message.php of Kashipara E-learning Management System v1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the my_message parameter.