CVE-2019-8288

Vulnerability in Online Store v1.0, Stored XSS in userview.php where adidasmemberuser variable is not sanitized...

CVE-2019-8288

The CVE-2019-8288 entry refers to a Stored Cross-Site Scripting vulnerability in Online Store v1.0, exploitable via the unsanitized adidas_member_user variable in user_view.php. Affected: Online Store v1.0 (component: user_view.php, variable: adidas_member_user). Root cause: lack of input sanitiz...