Lucene search

K

Smartstore Security Vulnerabilities

cve

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials/_ForumPost.cshtml does not call HtmlUtils.SanitizeHtml on certain text for a forum...

9.8CVSS

9.4AI Score

0.004EPSS

2021-05-12 03:15 PM

31

6

cve

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private...

9.8CVSS

9.4AI Score

0.004EPSS

2021-05-12 03:15 PM

28

6

cve

Affected versions of Smartstore have a missing WebApi Authentication attribute. This vulnerability affects Smartstore shops in version 4.0.0 & 4.0.1 which have installed and activated the Web API plugin. Users of Smartstore 4.0.0 and 4.0.1 must merge their repository with 4.0.x or overwrite the...

9.8CVSS

9.3AI Score

0.003EPSS

2020-10-08 11:15 PM

45