CVE-2024-10757

A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Shopping Portal 2.0. Affected by this issue is some unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/js_data.php. The manipulation of the argument scripts leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-79

• https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(js_data.php).mdExploit, Third Party Advisory
• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.282926Permissions Required, VDB Entry
• https://vuldb.com/?id.282926Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.436391Third Party Advisory, VDB Entry

Published

Nov 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10751A vulnerability was found in Codezips ISP Management System …9.8
• CVE-2024-10752A vulnerability was found in Codezips Pet Shop Management Sy…9.8
• CVE-2024-10753A vulnerability was found in PHPGurukul Online Shopping Port…5.4
• CVE-2024-10754A vulnerability was found in PHPGurukul Online Shopping Port…6.1
• CVE-2024-10755A vulnerability classified as problematic has been found in …6.1
• CVE-2024-10756A vulnerability classified as problematic was found in PHPGu…6.1
• CVE-2024-10758A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-10759A vulnerability has been found in itsourcecode Farm Manageme…8.8
• CVE-2024-1076The SSL Zen WordPress plugin before 4.6.0 does not properly…6.5
• CVE-2024-10760A vulnerability was found in code-projects University Event …7.5
• CVE-2024-10761A vulnerability was found in Umbraco CMS up to 10.7.7/12.3.6…6.9
• CVE-2024-10762In lunary-ai/lunary before version 1.5.9, the /v1/evaluators…8.1