CVE-2024-12991

A vulnerability was found in Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. It has been declared as problematic. This vulnerability affects unknown code of the file /home-order. The manipulation of the argument orderStatus with the input %22%3E%3Csvg%20onload=alert5888%3E leads ...

CVE-2024-12991

A vulnerability was found in Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. It has been declared as problematic. This vulnerability affects unknown code of the file /home-order. The manipulation of the argument orderStatus with the input %22%3E%3Csvg%20onload=alert5888%3E leads ...

CVE-2024-12991

creationtimestamp| type| source ---|---|--- 2024-12-27 19:32:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113726450950568003 2024-12-27 20:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecska4m6e2m 2024-12-27 21:52:54+00:00| seen|...

CVE-2024-12991 Beijing Longda Jushang Technology DBShop商城系统 home-order cross site scripting

A vulnerability was found in Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. It has been declared as problematic. This vulnerability affects unknown code of the file /home-order. The manipulation of the argument orderStatus with the input %22%3E%3Csvg%20onload=alert5888%3E leads ...

CVE-2024-12991

CVE-2024-12991 affects Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. The vulnerable component is the file /home-order, where the parameter orderStatus can be manipulated to trigger a cross-site scripting (XSS) attack. The payload shown in reports, %22%3E%3Csvg%20onload=alert(58...