Code-Projects Budget Management vulnerabilities

3 CVEs affecting Code-Projects Budget Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-5048, published 2024-05-17.

More from Code-Projects.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-5048, published 2024-05-17. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in code-projects Budget Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the…
• CVE-2024-34955, published 2024-05-15. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter.
• CVE-2024-34954, published 2024-05-15. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter.