CVE-2024-11996: code-projects Farmacia editar-fornecedor.php cross site scripting

Published Nov 30, 2024

Updated

A vulnerability was found in code-projects Farmacia 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /editar-fornecedor.php. The manipulation of the argument cidade leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Affected Software

1 affected component

Anisha Farmacia=1.0

Event History

Nov 30, 2024

CVE Published

via MITRE·07:31 AM

Data Sourced

via MITRE·07:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-11996?

CVE-2024-11996 has been classified as a problematic vulnerability due to its potential for remote exploitation.

How does CVE-2024-11996 affect users?

CVE-2024-11996 allows for cross-site scripting attacks through the manipulation of the 'cidade' parameter in /editar-fornecedor.php.

Which software version is affected by CVE-2024-11996?

The vulnerable software version for CVE-2024-11996 is Farmacia 1.0.

How can I mitigate CVE-2024-11996?

Mitigation for CVE-2024-11996 involves sanitizing and validating the input to the 'cidade' parameter in the affected file.

Is there a patch available for CVE-2024-11996?

As of now, there is no official patch available for CVE-2024-11996, so implementing input validation is crucial.