CVE-2024-2996: falha de baixa gravidade em Bdtask Multi-Store Inventory Management System
Bdtask Multi-Store Inventory Management System Page Title cross site scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2.4epss 0.5%
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258198 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Bdtask · Multi-Store Inventory Management SystemCVEs relacionadas — Bdtask Multi-Store Inventory Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-2997LOWBdtask Multi-Store Inventory Management System cross site scriptingEPSS 1.2%CVE-2024-2998LOWBdtask Multi-Store Inventory Management System Store Update Page cross site scriptingEPSS 0.5%CVE-2024-3151MEDIUMBdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgeryEPSS 0.4%CVE-2026-10172MEDIUMBdtask Multi-Store Inventory Management System Component Module.php upload unrestricted uploadEPSS 0.2%CVE-2026-10155MEDIUMBdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injectionEPSS 0.2%