CVE-2024-3579

2024-05-1416:17:32

CWE-79

[email protected]

web.nvd.nist.gov

online shopping system

reflected xss

security vulnerability

crafted url

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Open-source project Online Shopping System Advanced is vulnerable to Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user’s browser.

References

cert.pl/en/posts/2024/05/CVE-2024-3579

cert.pl/posts/2024/05/CVE-2024-3579