CVE-2024-24135: XSS
Published Jan 29, 2024
·Updated
Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0 are vulnerable to XSS attacks.
Affected Software
1 affected component
Remyandrade Product Inventory With Export To Excel=1.0
Event History
Jan 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24135?
CVE-2024-24135 has a moderate severity level due to its potential for exploitation through XSS attacks.
2
How do I fix CVE-2024-24135?
To fix CVE-2024-24135, validate and sanitize user input in the 'Add Product' section to prevent XSS vulnerabilities.
3
What type of attack is associated with CVE-2024-24135?
CVE-2024-24135 is associated with Cross-Site Scripting (XSS) attacks, which can lead to unauthorized actions on behalf of users.
4
Which version of Sourcecodester Product Inventory is affected by CVE-2024-24135?
Only version 1.0 of Sourcecodester Product Inventory with Export to Excel is affected by CVE-2024-24135.
5
What components of the application are vulnerable in CVE-2024-24135?
The 'Product Name' and 'Product Code' fields in the 'Add Product' section are vulnerable in CVE-2024-24135.