PT-2024-24177 · Unknown · Cosmetics/Beauty Product Online Store

Mohitkumar0786 · Published 2024-04-15 · Updated 2024-08-20 · CVE-2024-31651

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cosmetics and Beauty Product Online Store version 1.0

Description A cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter. This enables attackers to potentially steal user data or take control of user sessions.

Recommendations For Cosmetics and Beauty Product Online Store version 1.0, consider validating and sanitizing user input for the First Name parameter to prevent XSS attacks. As a temporary workaround, restrict the use of the First Name field until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-31651

Affected Products

Cosmetics/Beauty Product Online Store

References · 7

• 🔥 https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-31651.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-31651 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31651 · Security Note
• https://twitter.com/CVEnew/status/1779984551751594213 · Twitter Post
• https://t.me/cvenotify/91353 · Telegram Post
• https://t.me/cvenotify/76879 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1780036146182959353 · Twitter Post