Cross-Site Scripting Vulnerability in Bdtask Multi-Store Inventory Management System

CVE-2024-2996

What is CVE-2024-2996?

A cross-site scripting vulnerability exists in the Bdtask Multi-Store Inventory Management System due to improper handling of user input in the Page Title Handler. This security issue potentially allows remote attackers to inject malicious scripts into web pages, facilitating unauthorized access to sensitive information and performing actions on behalf of users without their consent. Despite attempts to notify the vendor regarding this critical security risk, no response has been received, leaving users vulnerable to potential exploitation.

References