CVE-2024-2996: Bdtask Multi-Store Inventory Management System Page Title cross site scripting
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258198 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2996?
CVE-2024-2996 has been classified as problematic.
How do I fix CVE-2024-2996?
To fix CVE-2024-2996, update Bdtask Multi-Store Inventory Management System to a version released after 20240320.
What type of vulnerability is CVE-2024-2996?
CVE-2024-2996 is a cross-site scripting (XSS) vulnerability.
Which component is affected by CVE-2024-2996?
CVE-2024-2996 affects the Page Title Handler function of the Bdtask Multi-Store Inventory Management System.
What are the implications of CVE-2024-2996?
An attacker can potentially exploit CVE-2024-2996 to execute arbitrary scripts in the context of the user's browser.