CVE-2022-27436

creationtimestamp| type| source ---|---|--- 2022-04-04 18:27:51+00:00| seen| https://t.me/cibsecurity/40105...

CVE-2022-27436

CVE-2022-27436 affects Ecommerce-Website v1.1.0. A cross-site scripting (XSS) vulnerability exists in /public/admin/index.php?add_user that allows arbitrary web scripts or HTML to be executed via a crafted payload in the username field. Root cause appears to be insufficient input sanitization for...