Projectworlds Online Voting System Project vulnerabilities

3 vulnerabilities

Known vulnerabilities in Projectworlds Online Voting System Project, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2024-45986projectworldsonline_voting_system_project
EPSS score
0.28%
A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.9.8CVE-2023-48433projectworlds pvt. limitedonline voting system project+1
EPSS score
0.67%
Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the login_action.php resource does not validate the characters received and they are sent unfiltered to the database.9.8CVE-2023-48434projectworlds pvt. limitedonline voting system project+1
EPSS score
0.67%
Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the reg_action.php resource does not validate the characters received and they are sent unfiltered to the database.