CVE-2024-45986

MEDIUM 5.4CVE-2024-45986 · Published 26/09/2024 · updated 17/06/2026

In short

CVE-2024-45986 is a MEDIUM (CVSS 5.4) vulnerability affecting online voting system project (projectworlds).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 21.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
online voting system project projectworlds	`= 1.0`	No fix yet

Description

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.

References

soursec/CVEs · Exploit

More vulnerabilities in online voting system project

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free