CVE-2024-10768

LOW

Phpgurukul Online Shopping Portal - XSS

Title source: rule
STIX 2.1

Description

A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/two_tables.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Scores

CVSS v3 3.5
EPSS 0.0014
EPSS Percentile 34.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-74 CWE-79 CWE-707
Status published
Products (1)
phpgurukul/online_shopping_portal 2.0
Published Nov 04, 2024
Tracked Since Feb 18, 2026