CVE-2024-4072 LOW

CVE-2024-4072: Kashipara Online Furniture Shopping Ecommerce Website search.php cross site scripting

Vendor Kashipara
Product Online Furniture Shopping Ecommerce Website
Weakness CWE-79 · XSS
Published April 23, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been classified as problematic. Affected is an unknown function of the file search.php. The manipulation of the argument txtSearch leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-261798 is the identifier assigned to this vulnerability.

Key dates

02Disclosure timeline

April 23, 2024 CVE published
August 1, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-62051 WordPress UDesign Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability CVE-2023-45144 Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App CVE-2025-5134 Tmall Demo Buy Item Page cross site scripting CVE-2026-24979 WordPress Jobica Core plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-46856 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)