CVE-2024-37619

StrongShop v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the specgroupid parameter at /spec/index.blade.php...

PT-2024-27675 · Unknown · Strongshop

Name of the Vulnerable Software and Affected Versions: StrongShop version 1.0 Description: A reflected cross-site scripting XSS issue was found, which can be exploited via the spec group id parameter at the "/spec/index.blade.php" API endpoint. Recommendations: For StrongShop version 1.0, avoid...

StrongShop Cross-Site Scripting Vulnerability

StrongShop is a free and open source cross-border e-commerce mall website by StrongShop Open Source. A cross-site scripting vulnerability exists in StrongShop v1.0, which originates from a cross-site scripting vulnerability in the specgroupid parameter on /spec/index.blade.php...