Cross site scripting

2022-10-1118:15:00

PRIOn knowledge base

www.prio-n.com

stored xss

merchandise online store

v1.0

edit account form

arbitrary javascript injection

nvd

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form.

CPENameOperatorVersion
merchandise_online_storeeq1.0

CPE	Name	Operator	Version
	merchandise_online_store	eq	1.0

References

github.com/draco1725/vloggers/blob/main/poc