CVE-2024-46241: XSS
Published Sep 23, 2024
·Updated
PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in addproduct.php and editproduct.php.
Affected Software
2 affected components
Phpgurukul Dairy Farm Shop Management System
Phpgurukul Dairy Farm Shop Management System=1.1
Event History
Sep 23, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-46241?
CVE-2024-46241 is considered a medium severity vulnerability due to its ability to facilitate Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2024-46241?
To fix CVE-2024-46241, sanitize and validate the pname parameter in add_product.php and edit_product.php to prevent XSS exploits.
3
What systems are affected by CVE-2024-46241?
CVE-2024-46241 affects PHPGurukul Dairy Farm Shop Management System version 1.1.
4
What type of vulnerability is CVE-2024-46241?
CVE-2024-46241 is a Cross-Site Scripting (XSS) vulnerability.
5
How can CVE-2024-46241 impact users?
CVE-2024-46241 can allow attackers to execute arbitrary JavaScript code in a user's browser, potentially compromising user data and session integrity.