Security Advisory

CVE-2024-39090

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-18 00:00:00

Last updated 2024-08-02 04:19:20

Assigner mitre

State PUBLISHED

Description

The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forgery (CSRF) to lead to Stored Cross-Site Scripting (XSS). An attacker can exploit this vulnerability to execute arbitrary JavaScript code in the context of a users session, potentially leading to account takeover.

← Browse all CVEs View on cve.org ↗