CVE-2024-10746: medium-severity vulnerability in PHPGurukul Online Shopping Portal
PHPGurukul Online Shopping Portal dom_data.php cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.4%
A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. This affects an unknown part of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data.php. The manipulation of the argument scripts leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
PHPGurukul · Online Shopping PortalRelated CVEs — PHPGurukul Online Shopping Portal
In the same product, most dangerous first.
CVE-2024-9326MEDIUMPHPGurukul Online Shopping Portal Admin Panel index.php sql injectionEPSS 1.4%CVE-2023-3605MEDIUMPHPGurukul Online Shopping Portal Registration Page excessive authenticationEPSS 0.7%CVE-2025-5078MEDIUMPHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injectionEPSS 0.6%CVE-2025-5079MEDIUMPHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injectionEPSS 0.6%CVE-2025-1855MEDIUMPHPGurukul Online Shopping Portal product-details.php sql injectionEPSS 0.5%CVE-2024-10757MEDIUMPHPGurukul Online Shopping Portal js_data.php cross site scriptingEPSS 0.5%