CVE-2024-23868

creationtimestamp| type| source ---|---|--- 2024-01-26 11:26:50+00:00| seen| https://t.me/ctinow/174147 2024-02-19 11:56:26+00:00| seen| https://t.me/ctinow/187596...

CVE-2024-23868 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/grnlist.php, in the deleted parameter. Exploitation of this vulnerability could...

CVE-2024-23868

CVE-2024-23868 affects Cups Easy (Purchase & Inventory) version 1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by insufficient encoding of inputs on the /cupseasylive/grnlist.php page, specifically the deleted parameter. This could allow an authenticated attacker to lure a use...