7.1 High

CVE-2024-56301 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Reflected XSS.This issue affects Distance Based Shipping Calculator: from n/a through <= 2.0.21.

Affected products and versions

Product	Affected versions	Fixed in
Distance Based Shipping Calculator 2.0	earliest → 2.0.21	No fix stated
Distance Based Shipping Calculator 2.0	earliest → 2.0.21	No fix stated

The 2 CVEs of Distance Based Shipping Calculator →

CVE-2024-52495 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in… 8.5 High

Do you use Distance Based Shipping Calculator?

Track this CVE Watch Distance Based Shipping Calculator Check my SBOMs

www.cveye.io/en/cve/CVE-2024-56301

Timeline

Published January 13, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2024-56301 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…

Description

Affected products and versions

Other CVEs of Distance Based Shipping Calculator