VYPR

Cups Easy

by Ajaysharma

CVEs (42)

  • CVE-2024-23856HigJan 26, 2024
    risk 0.53cvss 8.2epss 0.00

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemlist.php, in the description parameter. Exploitation of…

  • CVE-2024-23855HigJan 25, 2024
    risk 0.53cvss 8.2epss 0.00

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodemodify.php, in multiple parameters. Exploitation of…

Page 3 of 3