CVE-2024-37619

The open-source e-commerce platform StrongShop v1.0 contains a reflected cross-site scripting (XSS) vulnerability. This flaw exists in the spec_group_id parameter at the /spec/index.blade.php API endpoint. An attacker could exploit this to execute malicious scripts in a user's browser. As a worka...