CVE-2024-3579

Summary

Open-source project Online Shopping System Advanced is vulnerable to Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. 

Affected Software

Weaknesses

• CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://cert.pl/en/posts/2024/05/CVE-2024-3579
• https://cert.pl/posts/2024/05/CVE-2024-3579

References

• https://cert.pl/en/posts/2024/05/CVE-2024-3579
• https://cert.pl/posts/2024/05/CVE-2024-3579

• ←Previous
• Next→