CVE-2024-3579

The open-source project Online Shopping System Advanced (affected versions not specified) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation , which allows an attacker to trick a user into using a crafted URL ....