CVE-2024-26521

CE Phoenix (e-commerce software), version v1.0.8.20 and earlier , contains an HTML Injection vulnerability in the english.php component. The root cause is the insufficient neutralization of special characters , which allows a remote attacker to use a crafted payload to execute arbitrary code , es...

CVE-2024-26521

creationtimestamp| type| source ---|---|--- 2024-03-02 11:17:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6709 2024-03-02 23:43:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10077 2024-03-03 01:06:33+00:00| published-proof-of-concept|...