CVE-2024-10747

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Nov 4, 2024
Updated: Nov 5, 2024
CWE ID 79

Summary

CVE-2024-10747 is a newly disclosed vulnerability affecting the PHPGurukul Online Shopping Portal 2.0. The issue lies within the /admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data_th.php file, which contains problematic code. An attacker can exploit this vulnerability by manipulating the scripts argument, leading to cross-site scripting (XSS) attacks. These attacks can be initiated remotely, making the vulnerability a significant security risk. The exploit for this vulnerability has been made public, increasing the potential for widespread exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share