CVE-2024-4074

Summary

CVE-2024-4074 is a recently disclosed vulnerability affecting the Kashipara Online Furniture Shopping Ecommerce Website version 1.0. This issue, rated as problematic, targets an unidentified functionality within the file prodInfo.php. The vulnerability enables attackers to execute cross-site scripting (XSS) attacks by manipulating the prodId argument. The exploit can be launched remotely, increasing the risk for potential cyberattacks. The vulnerability identifier is VDB-261800, and the exploit has already been made public.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.