CVE-2024-23890

creationtimestamp| type| source ---|---|--- 2024-01-26 12:21:45+00:00| seen| https://t.me/ctinow/174183 2024-02-19 15:56:29+00:00| seen| https://t.me/ctinow/187760...

CVE-2024-23890 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itempopup.php, in the description parameter. Exploitation of this vulnerability...