CVE-2024-33975

CVSS V2 None CVSS V3 None
Description
Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'view' parameter in '/admin/products/index.php'.
Overview
  • CVE ID
  • CVE-2024-33975
  • Assigner
  • INCIBE
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-08-06T10:54:24.486Z
  • Last Modified Date
  • 2024-08-06T18:31:24.556Z
History
Created Old Value New Value Data Type Notes
2024-08-07 13:13:56 Added to TrackCVE