CVE-2024-10753: falha de média gravidade em PHPGurukul Online Shopping Portal
PHPGurukul Online Shopping Portal dom_data_two_headers.php cross site scripting
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.4%
A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. This vulnerability affects unknown code of the file admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data_two_headers.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
PHPGurukul · Online Shopping PortalCVEs relacionadas — PHPGurukul Online Shopping Portal
No mesmo produto, das mais perigosas para as menos.
CVE-2024-9326MEDIUMPHPGurukul Online Shopping Portal Admin Panel index.php sql injectionEPSS 1.4%CVE-2023-3605MEDIUMPHPGurukul Online Shopping Portal Registration Page excessive authenticationEPSS 0.7%CVE-2025-5078MEDIUMPHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injectionEPSS 0.6%CVE-2025-5079MEDIUMPHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injectionEPSS 0.6%CVE-2025-1855MEDIUMPHPGurukul Online Shopping Portal product-details.php sql injectionEPSS 0.5%CVE-2024-10757MEDIUMPHPGurukul Online Shopping Portal js_data.php cross site scriptingEPSS 0.5%