CVE-2024-0422: CodeAstro POS and Inventory Management System New Item Creation Page new_item cross site scripting
A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /newitem of the component New Item Creation Page. The manipulation of the argument newitem leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250441 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0422?
CVE-2024-0422 has been declared as problematic, indicating a significant security concern.
How do I fix CVE-2024-0422?
To fix CVE-2024-0422, it is recommended to upgrade the CodeAstro POS and Inventory Management System to the latest patched version.
What components are affected by CVE-2024-0422?
CVE-2024-0422 affects the New Item Creation Page functionality in the CodeAstro POS and Inventory Management System version 1.0.
What kind of vulnerability is CVE-2024-0422?
CVE-2024-0422 is a cross-site scripting (XSS) vulnerability due to improper handling of user input in the new_item argument.
Is CVE-2024-0422 exploitable remotely?
Yes, CVE-2024-0422 can be exploited remotely if an attacker can access the affected New Item Creation Page.