CVE-2024-44661

Medium · 5.4

CVSS

5.4

EPSS

0.2%

Published

Nov 17, 2025

CISA due date

—

The record

PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.

Ecosystem	Package	Introduced	Fixed