CVE-2024-2996: low-severity vulnerability in Bdtask Multi-Store Inventory Management System
Bdtask Multi-Store Inventory Management System Page Title cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 2.4epss 0.5%
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258198 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Affected products
Bdtask · Multi-Store Inventory Management SystemRelated CVEs — Bdtask Multi-Store Inventory Management System
In the same product, most dangerous first.
CVE-2024-2997LOWBdtask Multi-Store Inventory Management System cross site scriptingEPSS 1.2%CVE-2024-2998LOWBdtask Multi-Store Inventory Management System Store Update Page cross site scriptingEPSS 0.5%CVE-2024-3151MEDIUMBdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgeryEPSS 0.4%CVE-2026-10172MEDIUMBdtask Multi-Store Inventory Management System Component Module.php upload unrestricted uploadEPSS 0.2%CVE-2026-10155MEDIUMBdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injectionEPSS 0.2%