6 matches found
CVE-2022-42236
A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...
CVE-2022-42236
A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...
CVE-2022-42236
A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...
Cross site scripting
A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...
PT-2022-26324 · Unknown · Merchandise Online Store
Name of the Vulnerable Software and Affected Versions: Merchandise Online Store version 1.0 Description: A Stored XSS issue allows the injection of arbitrary JavaScript in the edit account form. Recommendations: For version 1.0, update the edit account form to properly sanitize user input and...
CVE-2022-42236
A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...