CVE-2024-13196

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-13196

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13196.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-13196

Published

2025-01-09T00:15:25.760Z

Modified

2026-03-15T21:45:18.854072Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been declared as problematic. This vulnerability affects the function BookSearchList of the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The manipulation of the argument keywords leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References

Affected packages

Git / github.com/donglight/bookstore

Affected ranges

Type

GIT

Repo

https://github.com/donglight/bookstore

Events

Introduced

Last affected

7018d7b2c1cc8ca9e0ee986af1d1b73944136067

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0"
        }
    ]
}

Affected versions

1.*

1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13196.json"