5 matches found
CVE-2024-37619
StrongShop v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the specgroupid parameter at /spec/index.blade.php...
6.1CVSS5.6AI score0.00352EPSS
SaveExploits1References2
CVE-2024-37619
StrongShop v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the specgroupid parameter at /spec/index.blade.php...
7.6CVSS0.00352EPSS
SaveExploits1References2
CVE-2024-37619
The open-source e-commerce platform StrongShop v1.0 contains a reflected cross-site scripting (XSS) vulnerability. This flaw exists in the spec_group_id parameter at the /spec/index.blade.php API endpoint. An attacker could exploit this to execute malicious scripts in a user's browser. As a worka...
6.1CVSS6.2AI score0.00352EPSS
SaveExploits1References2Affected Software1
20