Lucene search
+L

3 matches found

NVD
NVD
•added 2024/04/15 9:15 p.m.•22 views

CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

9.6CVSS5.8AI score0.00765EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/04/15 12:00 a.m.•38 views

CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

6AI score0.00765EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/15 12:00 a.m.•59 views

CVE-2024-31650

The Cosmetics and Beauty Product Online Store v1.0 is vulnerable to a cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically when handling the Last Name parameter. Attackers can inject a crafted payload to execute arbitrary...

9.6CVSS6AI score0.00765EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder