EUVD-2020-4979

Malware in sbrugna...

CVE-2020-12683

Katyshop2 before 2.12 has multiple stored XSS issues...

Katyshop2 Cross-Site Scripting Vulnerability

Katyshop2 is a suite of e-commerce applications based on PHP and MySQL. A cross-site scripting vulnerability exists in Katyshop2 versions prior to 2.12. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit this vulnerability to...

CVE-2020-12683

Katyshop2 before 2.12 has multiple stored XSS issues...

CVE-2020-12683

Katyshop2 before 2.12 has multiple stored XSS issues...

Cross site scripting

Katyshop2 before 2.12 has multiple stored XSS issues...

CVE-2020-12683

Katyshop2 before 2.12 has multiple stored XSS issues...

CVE-2020-12683

Katyshop2 (PHP/MySQL-based e-commerce suite) is affected by CVE-2020-12683 due to stored XSS in versions prior to 2.12. The root cause is improper validation of client-side data in the web app, enabling the attacker to inject and execute client-side scripts. Public references in multiple sources ...