CVE-2024-31651

CVE-2024-31651 describes a cross-site scripting (XSS) vulnerability in the Cosmetics and Beauty Product Online Store v1.0. The issue arises from unsanitized input in the irst Name parameter, enabling an attacker to inject and execute arbitrary web scripts or HTML in the victim00. Documents con...

CVE-2024-31649

CVE-2024-31649 is a cross-site scripting (XSS) vulnerability in Cosmetics and Beauty Product Online Store v1.0. The flaw allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the Product Name parameter. Public sources consistently describe the affected so...

CVE-2024-31652

Cosmetics and Beauty Product Online Store (version 1.0) has a cross-site scripting (XSS) vulnerability exploitable via a crafted payload in the Search parameter. Affected component: the Search input handling in the web app. Root cause: reflected XSS allowing arbitrary web scripts/HTML to execute ...

CVE-2024-31650

CVE-2024-31650 describes a cross-site scripting (XSS) vulnerability in the Cosmetics and Beauty Product Online Store v1.0. The flaw is triggered through a crafted payload in the Last Name parameter, allowing arbitrary web scripts/HTML execution. The NVD entry reports a CVSSv3.1 base score of 9.6 ...