CVE-2024-2997: Bdtask Multi-Store Inventory Management System cross site scripting
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258199. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2997?
CVE-2024-2997 is classified as a problematic vulnerability affecting the Bdtask Multi-Store Inventory Management System.
How do I fix CVE-2024-2997?
To fix CVE-2024-2997, users should update to a version of the Bdtask Multi-Store Inventory Management System that is released after March 20, 2024.
What are the affected versions for CVE-2024-2997?
CVE-2024-2997 affects all versions of the Bdtask Multi-Store Inventory Management System up to and including version 20240320.
What type of vulnerability is CVE-2024-2997?
CVE-2024-2997 is identified as a cross-site scripting (XSS) vulnerability stemming from improper handling of input related to Category Name, Model Name, Brand Name, or Unit Name.
What impacts could result from CVE-2024-2997?
Exploitation of CVE-2024-2997 could allow attackers to execute malicious scripts in the context of the user's session, potentially leading to data theft or unauthorized actions.