CVE-2024-23863

creationtimestamp| type| source ---|---|--- 2024-01-26 11:26:42+00:00| seen| https://t.me/ctinow/174142 2024-02-19 10:51:04+00:00| seen| https://t.me/ctinow/187568...

CVE-2024-23863 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxstructuredisplay.php, in the description parameter. Exploitation of this...

CVE-2024-23863

CVE-2024-23863 affects Cups Easy (Purchase & Inventory) v1.0. The vulnerability is an XSS flaw in the description parameter of /cupseasylive/taxstructuredisplay.php, caused by insufficient encoding of user-controlled inputs. An attacker could lure an authenticated user to a crafted URL, potential...