2 matches found
CVE-2017-6811
MaNGOSWebV4 4.0.8 is affected by a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter). The vulnerability arises from unvalidated input in the id parameter, enabling script injection. No exploitation details or patches are provided in the supplied documents. Affected product i...