Unrated severityNVD Advisory· Published Jul 18, 2024· Updated Aug 2, 2024

CVE-2024-39090

Description

The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forgery (CSRF) to lead to Stored Cross-Site Scripting (XSS). An attacker can exploit this vulnerability to execute arbitrary JavaScript code in the context of a user's session, potentially leading to account takeover.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpgurukul/Online Shopping Portalcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =2.0

Patches

Vulnerability mechanics

References

github.com/arijitdirghanji/My-CVEs/blob/main/CVE-2024-39090.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000