CVE-2020-24026

CVE-2020-24026 concerns TinyShop 1.2.0 (RageFrame2). The vulnerability is a stored XSS via the explain_first and again_explain parameters of /evaluate/index.php, allowing remote exploitation that can lead to XSS or information disclosure. All concrete details provided relate to TinyShop’s version...

CVE-2020-24026

TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explainfirst and againexplain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely, resulting in cross-site scriptin...