CVE-2024-23883 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxstructuremodify.php, in the description parameter. Exploitation of this...

CVE-2024-23883

CVE-2024-23883 affects Cups Easy (Purchase & Inventory) v1.0. The XSS vulnerability arises from insufficient encoding of user-controlled input in the description parameter of /cupseasylive/taxstructuremodify.php, allowing a remote attacker to craft a URL that, when visited by an authenticated use...