CVE-2024-11243

CVE-2024-11243 affects code-projects Online Shop Store 1.0. The /signup.php endpoint’s m2 parameter can be manipulated to inject a cross-site scripting payload (example: ), enabling remote exploitation. Disclosures indicate active exploitation potential, with the payload demonstrating XSS capabil...