CVE-2024-2997: low-severity vulnerability in Bdtask Multi-Store Inventory Management System
Bdtask Multi-Store Inventory Management System cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 2.4epss 1.2%
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258199. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Affected products
Bdtask · Multi-Store Inventory Management SystemRelated CVEs — Bdtask Multi-Store Inventory Management System
In the same product, most dangerous first.
CVE-2024-2998LOWBdtask Multi-Store Inventory Management System Store Update Page cross site scriptingEPSS 0.5%CVE-2024-2996LOWBdtask Multi-Store Inventory Management System Page Title cross site scriptingEPSS 0.5%CVE-2024-3151MEDIUMBdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgeryEPSS 0.4%CVE-2026-10172MEDIUMBdtask Multi-Store Inventory Management System Component Module.php upload unrestricted uploadEPSS 0.2%CVE-2026-10155MEDIUMBdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injectionEPSS 0.2%