CVE-2024-57494: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494

Neto E-Commerce CMS versions 6.313.0 through 6.3115 are affected by a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit the kw parameter to potentially escalate privileges . To remediate this issue, users should update to a version later than 6.3115. Exploitation details are...