CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

CVE-2024-31652

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...

WordPress Open Close WooCommerce Store plugin <= 4.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Open Close WooCommerce Store versions = 4.9.1...

CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

CVE-2024-31650

The Cosmetics and Beauty Product Online Store v1.0 is vulnerable to a cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically when handling the Last Name parameter. Attackers can inject a crafted payload to execute arbitrary...

CVE-2024-31649

A cross-site scripting (XSS) vulnerability exists in Cosmetics and Beauty Product Online Store v1.0 . The flaw originates from the improper neutralization of input during web page generation, specifically allowing attackers to inject crafted payloads into the Product Name parameter. Successful ex...

CVE-2024-31652

The Cosmetics and Beauty Product Online Store v1.0 is vulnerable to a cross-site scripting (XSS) flaw. Attackers can inject a crafted payload into the Search parameter to execute arbitrary web scripts or HTML. This vulnerability could allow attackers to steal user data or take control of user ses...

CVE-2024-31651

The Cosmetics and Beauty Product Online Store v1.0 is vulnerable to a cross-site scripting (XSS) flaw caused by the improper neutralization of input during web page generation. Attackers can inject a crafted payload into the First Name parameter to execute arbitrary web scripts or HTML. This vuln...

CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

CVE-2024-31652: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...

CVE-2024-31651: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

CVE-2024-31649: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

Cosmetics and Beauty Product Online Store has a security vulnerability

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from the individual developer Carlo Montero. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Product...

CVE-2024-31652

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...

PT-2024-24174 · Unknown · Cosmetics/Beauty Product Online Store

Name of the Vulnerable Software and Affected Versions: Cosmetics and Beauty Product Online Store version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter. This enables attacke...

Cosmetics and Beauty Product Online Store has a security vulnerability

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero, an individual developer. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Search...

Cosmetics and Beauty Product Online Store has a security vulnerability

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero, an individual developer. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Last Name...

WordPress Plugin Shopping Cart & eCommerce Store Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin Shopping Cart & eCommerce Store A...

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

CVE-2024-31649

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...