CVE-2024-3084

CVE-2024-3084 is a cross-site scripting (XSS) vulnerability affecting PHPGurukul Emergency Ambulance Hiring Portal version 1.0. Specifically, it arises from improper handling of user input in the "Hire an Ambulance" page, allowing malicious scripts to be injected via fields like Patient Name, Relative Name, Relative Phone Number, City, State, or Message. This vulnerability carries a CVSS score of 6.1 (Medium), indicating it can be exploited remotely with low attack complexity, requiring user interaction. A successful attack could lead to limited confidentiality and integrity impacts, such as session hijacking or defacement. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei. Community discussion and media coverage for this CVE are currently minimal.