TinyShop cross-site scripting vulnerabilities

TinyShop is a software application. A free and open source mall with basic sales functionality based on RageFrame2. A security vulnerability exists in TinyShop 1.2.0, which originates in the explainfirst and attributeexplain parameters of /evaluate/index.php...

PT-2021-10999

Name of the Vulnerable Software and Affected Versions: TinyShop version 1.2.0 Description: The issue is related to a stored XSS vulnerability. It can be exploited via the explain first and again explain parameters of the "/evaluate/index.php" page, potentially resulting in cross-site scripting XS...