Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/26 12:00 a.m.•1 views

CVE-2024-23868: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/grnlist.php, in the deleted parameter. Exploitation of this vulnerability could...

8.2CVSS5.8AI score0.00399EPSS
SaveExploits0References2
Rows per page
Query Builder