CVE-2024-23869

Summary

CVE-2024-23869 is a newly reported vulnerability affecting Cups Easy (Purchase & Inventory) version 1.0. The issue resides in the insufficient encoding of user-controlled inputs, giving rise to a Cross-Site Scripting (XSS) weakness. This particular vulnerability can be exploited via the /cupseasylive/stockissuanceprint.php file, specifically in the issuanceno parameter. Successful exploitation permits a remote attacker to send a crafted URL to an authenticated user, potentially stealing their session cookie credentials.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.