CVE-2024-11243
CVSS 2.0 Score 5 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 94
CWE ID 79
Summary
CVE-2024-11243 is a newly identified vulnerability in the code-projects Online Shop Store 1.0. This issue lies in the /signup.php file and can be exploited through the manipulation of the argument m2. Attackers can use input like <svg%20onload=alert(document.cookie)> to initiate cross-site scripting attacks, which may result in the disclosure of user cookies. This vulnerability poses a significant risk as it can be exploited remotely, and the exploit has already been made public.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.