CVE-2024-46241

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
5.9MEDIUM
EPSS
0.1%
top 69.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Dairy Farm Shop Management System
Timeline
PublishedSep 23

Description

PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in add_product.php and edit_product.php.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 2.5 | Impact: 3.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-mxj5-w2rm-4rhf: PHPGurukul Dairy Farm Shop Management System v1↗2024-09-23
▶
CVEList
CVE-2024-46241: PHPGurukul Dairy Farm Shop Management System v1↗2024-09-23
▶
CVE-2024-46241 (MEDIUM CVSS 5.9) | PHPGurukul Dairy Farm Shop Manageme | cvebase.io