Projectworlds Online Voting System Project vulnerabilities

3 CVEs affecting Projectworlds Online Voting System Project, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-45986, published 2024-09-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-48434, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the reg_action.php resource does not validate the characters…
CVE-2023-48433, published 2023-12-20. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the login_action.php resource does not validate the characters…
CVE-2024-45986, published 2024-09-26. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is…