Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:49 p.m.•18 views

CVE-2026-38939

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...

6.1CVSS6.7AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/30 4:16 p.m.•20 views

CVE-2026-38939

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...

6.1CVSS0.00214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•7 views

CVE-2026-38939: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...

6.1CVSS6.7AI score0.00214EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/30 12:00 a.m.•12 views

CVE-2026-38939

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...

6.7AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/30 12:00 a.m.•57 views

CVE-2026-38939

The andrewtch88 mvc-ecommerce v.1.0 software contains a Cross Site Scripting (XSS) vulnerability in the product_catalogue.php component. This flaw allows a remote attacker to execute arbitrary code and obtain sensitive information . While the vulnerability is identified as XSS, the description ex...

6.1CVSS6.7AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/30 12:00 a.m.•23 views

PT-2026-36121

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the product catalogue.php component...

6.1CVSS6.7AI score0.00214EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/30 12:00 a.m.•46 views

CVE-2026-38939

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...

0.00214EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/30 12:00 a.m.•19 views

EUVD-2026-26387

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...

6.1CVSS6.7AI score0.00214EPSS
SaveExploits0References1
Mend
Mend
•added 2026/04/30 12:00 a.m.•6 views

CVE-2026-38939

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...

6.1CVSS6.7AI score0.00214EPSS
SaveExploits0References1
Rows per page
Query Builder