CVE-2024-37621

StrongShop v1.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the component /shippingOptionConfig/index.blade.php...

CVE-2024-37621

StrongShop v1.0 is susceptible to a Server-Side Template Injection (SSTI) vulnerability within the /shippingOptionConfig/index.blade.php component. While the technical cause of the injection is not detailed, the vulnerability could allow for unauthorized server-side actions. To mitigate this risk...

CVE-2024-37619

StrongShop v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the specgroupid parameter at /spec/index.blade.php...