{"id":"CVE-2024-2146","aliases":["EUVD-2024-27110","GHSA-7hm7-c3h2-h8f7"],"status":"published","title":"SourceCodester Online Mobile Management Store ?p=products cross site scripting","description":"A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255499.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00566,"percentile":0.47237,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2024-03-03T14:31:04Z","modified":"2026-06-17T07:23:49Z","products":[{"vendor":"oretnom23","product":"online_mobile_store_management_system"},{"vendor":"sourcecodester","product":"online mobile management store"},{"vendor":"sourcecodester","product":"online_mobile_management_store"}],"references":[{"url":"https://vuldb.com/?id.255499","tags":["vdb-entry","technical-description","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.255499","tags":["signature","permissions-required","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://github.com/vanitashtml/CVE-Dumps/blob/main/Reflected%20XSS%20in%20Mobile%20Management%20Store.md","tags":["exploit","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2146"},{"url":"https://github.com/advisories/GHSA-7hm7-c3h2-h8f7"}],"sources":{"cve":[{"id":"CVE-2024-2146","title":"SourceCodester Online Mobile Management Store ?p=products cross site scripting","description":"A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255499.","status":"published","published":"2024-03-03T14:31:04.104Z","modified":"2024-08-23T20:45:05.547Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:09.897248Z"}],"euvd":[{"id":"EUVD-2024-27110","description":"A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255499.","status":"published","published":"2024-03-03T14:31:04Z","modified":"2024-08-23T20:45:05Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:56:11.81667Z"}],"ghsa":[{"id":"GHSA-7hm7-c3h2-h8f7","title":"A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been...","description":"A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255499.","status":"published","published":"2024-03-03T15:30:37Z","modified":"2026-03-24T05:02:30Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:06:48.910736Z"}],"nvd":[{"id":"CVE-2024-2146","description":"A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255499.","status":"published","published":"2024-03-03T15:15:07.573Z","modified":"2026-06-17T07:23:49.053Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:39.488031Z"}]}}