2 matches found
CVE-2025-0879
The CVE-2025-0879 entry describes an XSS vulnerability in Shopside App caused by improper neutralization of input during web page generation. Affected product: Shopside App (versions before 17.02.2025). Underlying cause: input is not properly sanitized before being embedded into generated pages, ...
PT-2025-38146
Name of the Vulnerable Software and Affected Versions: Shopside App versions prior to 17.02.2025 Description: Shopside App is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This issue requires high privileges. Recommendations:...