CVE-2024-2997: falha de baixa gravidade em Bdtask Multi-Store Inventory Management System
Bdtask Multi-Store Inventory Management System cross site scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2.4epss 1.2%
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258199. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Bdtask · Multi-Store Inventory Management SystemCVEs relacionadas — Bdtask Multi-Store Inventory Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-2998LOWBdtask Multi-Store Inventory Management System Store Update Page cross site scriptingEPSS 0.5%CVE-2024-2996LOWBdtask Multi-Store Inventory Management System Page Title cross site scriptingEPSS 0.5%CVE-2024-3151MEDIUMBdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgeryEPSS 0.4%CVE-2026-10172MEDIUMBdtask Multi-Store Inventory Management System Component Module.php upload unrestricted uploadEPSS 0.2%CVE-2026-10155MEDIUMBdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injectionEPSS 0.2%