Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-12710
HistoryMar 06, 2024 - 12:00 a.m.

Online Mobile Store Management System Cross-Site Scripting Vulnerability

2024-03-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
online mobile store
cross-site scripting
version 1.0
user-supplied data
injecting
web script

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Online Mobile Store Management System is an online mobile store management system. A cross-site scripting vulnerability exists in Online Mobile Store Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the /?p=products file, and can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for CNVD-2024-12710