CVE-2024-9906: SourceCodester Online Eyewear Shop cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9906?
CVE-2024-9906 has been classified as problematic due to its potential for cross-site scripting attacks.
How does CVE-2024-9906 impact SourceCodester Online Eyewear Shop 1.0?
CVE-2024-9906 affects the /admin/?page=inventory/view_inventory component of SourceCodester Online Eyewear Shop 1.0 by allowing manipulation of the 'Code' argument.
How do I fix CVE-2024-9906?
To fix CVE-2024-9906, validate and sanitize user input in the affected functionalities to prevent cross-site scripting.
What type of vulnerability is CVE-2024-9906?
CVE-2024-9906 is a cross-site scripting (XSS) vulnerability.
Who is affected by CVE-2024-9906?
Users of SourceCodester Online Eyewear Shop version 1.0 are affected by CVE-2024-9906.