CVE-2024-42585

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42585

CVE-2024-42585 affects Warehouse Inventory System v2.0, specifically the delete_media.php component. The CSRF vulnerability allows privilege escalation with a high CVSS base score (8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation is CSRF requiring user interaction, and there is no vendor-s...