CVE-2024-10757

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Nov 4, 2024
Updated: Nov 5, 2024
CWE ID 79

Summary

CVE-2024-10757: A problematic cross-site scripting vulnerability has been identified in the PHPGurukul Online Shopping Portal 2.0. This issue lies within an unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/js_data.php. An attacker can exploit this flaw by manipulating the scripts argument, leading to the injection of malicious code. The vulnerability allows for remote attacks and the exploit has been made public.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share