4 matches found
CVE-2022-4596
A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...
CVE-2022-4596
creationtimestamp| type| source ---|---|--- 2022-12-18 14:40:46+00:00| seen| https://t.me/cibsecurity/54821...
CVE-2022-4596
Shoplazza 1.1 contains a cross-site scripting vulnerability in the Add Blog Post Handler. The issue arises from manipulating the Title argument for the endpoint /admin/api/admin/articles/, which can be exploited remotely and has public PoC material. Public advisories in multiple sources confirm t...
CVE-2022-4596 Shoplazza Add Blog Post cross site scripting
A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...