CVE-2023-3857

CVE-2023-3857 affects phpscriptpoint Ecommerce 1.15. The vulnerability lies in an unknown part of the file /product.php where manipulation of the parameter id leads to cross-site scripting (XSS). It can be exploited remotely. Multiple connected sources reaffirm the issue without providing a publi...

CVE-2023-3856

CVE-2023-3856 affects phpscriptpoint Ecommerce 1.15. The issue is a cross-site scripting (XSS) vulnerability in the blog-single.php file, due to manipulation of the slug parameter. Exploitation may be remote, and the risk affects unknown functionality of that file. Multiple sources (NVD, CVE list...