CVE-2024-2133

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in Bdtask Isshue Multi Store eCommerce Shopping Cart Solution 4.0. This affects an unknown part of the file /dashboard/Cinvoice/manage_invoice of the component Manage Sale Page. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255495.

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-213307.8Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityCVE-2024-213318.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-213328.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-213338.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-213349.8Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityCVE-2024-213358.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-213362.5Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-213375.2Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2024-213387.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2024-213396.4Windows USB Generic Parent Driver Remote Code Execution VulnerabilityCVE-2024-21346.5A vulnerability has been found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This vulnerability affects unknowCVE-2024-213404.6Windows Kernel Information Disclosure Vulnerability
CVE-2024-2133: Low severity, CVSS 2.4 | Vulnix