CVE-2024-1834

CVE-2024-1834 is a problematic Cross-Site Scripting (XSS) vulnerability affecting SourceCodester Simple Student Attendance System 1.0. Specifically, it arises from improper handling of the 'class_date' parameter within the 'page=attendance&class_id=1' component. Rated as Medium severity with a CVSS score of 6.1, this vulnerability can be exploited remotely without authentication, requiring user interaction (e.g., clicking a malicious link). Successful exploitation could lead to limited impact on confidentiality and integrity, such as session hijacking or defacement. While the exploit has been publicly disclosed, there is no evidence of active exploitation (KEV list) or readily available exploit intelligence (Metasploit, Nuclei, ExploitDB). Community discussion and media coverage for this CVE are minimal.