CVE-2024-10757
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Nov 4, 2024
Updated: Nov 5, 2024
CWE ID 79
Summary
CVE-2024-10757: A problematic cross-site scripting vulnerability has been identified in the PHPGurukul Online Shopping Portal 2.0. This issue lies within an unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/js_data.php. An attacker can exploit this flaw by manipulating the scripts argument, leading to the injection of malicious code. The vulnerability allows for remote attacks and the exploit has been made public.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share