CVE-2024-4073

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0

Description A vulnerability was found in the Kashipara Online Furniture Shopping Ecommerce Website, affecting an unknown functionality of the file prodList.php. The manipulation of the prodType argument leads to cross-site scripting. The attack can be launched remotely.

Recommendations For version 1.0, consider disabling the prodType argument in the prodList.php file until a patch is available. Restrict access to the prodList.php file to minimize the risk of exploitation. Avoid using the prodType argument in the affected functionality until the issue is resolved.