CVE-2024-10768

A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/two_tables.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-79
• CWE-707
• CWE-79

• https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(two_tables.php).mdExploit, Third Party Advisory
• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.282988Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.282988Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.436531Third Party Advisory, VDB Entry

Published

Nov 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10761A vulnerability was found in Umbraco CMS up to 10.7.7/12.3.6…6.9
• CVE-2024-10762In lunary-ai/lunary before version 1.5.9, the /v1/evaluators…8.1
• CVE-2024-10763The Campress theme for WordPress is vulnerable to Local File…9.8
• CVE-2024-10764A vulnerability classified as critical has been found in Cod…9.8
• CVE-2024-10765A vulnerability classified as critical was found in Codezips…9.8
• CVE-2024-10766A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-1077Use after free in Network in Google Chrome prior to 121.0.61…8.8
• CVE-2024-10770The Envo Extra plugin for WordPress is vulnerable to Informa…4.3
• CVE-2024-10771Due to missing input validation during one step of the firmw…8.8
• CVE-2024-10772Since the firmware update is not validated, an attacker can …8.8
• CVE-2024-10773The product is vulnerable to pass-the-hash attacks in combin…9
• CVE-2024-10774Unauthenticated CROWN APIs allow access to critical function…7.3