CVE-2024-57494

The Neto E-Commerce CMS (versions 6.313.0 through 6.3115 ) is susceptible to a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit the kw parameter to potentially escalate privileges. To mitigate this risk, it is recommended to update Neto E-Commerce CMS to a version later tha...

CVE-2024-57494: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...