CVE-2024-11247
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Nov 15, 2024
CWE ID 94
CWE ID 79
Summary
CVE-2024-11247 is a newly disclosed vulnerability affecting the Inventory Page component of SourceCodester Online Eyewear Shop 1.0. The issue lies within the /oews/classes/Master.php?f=save_product file and is caused by improper validation of user input, specifically the 'brand' argument. This vulnerability allows for cross-site scripting attacks, which can be executed remotely. The exploit has been made public, increasing the risk of potential attacks. It is important to note that other parameters might also be susceptible to this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.