Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0 are vulnerable to XSS attacks.
References
| Link | Resource |
|---|---|
| https://github.com/BurakSevben/2024_Product_Inventory_with_Export_to_Excel_XSS/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Feb 2024, 03:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:remyandrade:product_inventory_with_export_to_excel:1.0:*:*:*:*:*:*:* | |
| First Time |
Remyandrade product Inventory With Export To Excel
Remyandrade |
05 Feb 2024, 18:10
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| References | () https://github.com/BurakSevben/2024_Product_Inventory_with_Export_to_Excel_XSS/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:rems:product_inventory_with_export_to_excel:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Rems
Rems product Inventory With Export To Excel |
29 Jan 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-29 19:15
Updated : 2024-02-22 03:39
NVD link : CVE-2024-24135
Mitre link : CVE-2024-24135
CVE.ORG link : CVE-2024-24135
JSON object : View
Products Affected
remyandrade
- product_inventory_with_export_to_excel
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')