CVE-2014-6618

CVE-2014-6618 affects Your Online Shop; an XSS flaw exists in the products_id parameter. Public indicators include: CVSS v2 base 4.3 (I:Partial, A:None, C:N), exploit patterns demonstrated in OpenVAS NASL and packetstorm PoC details. Affected component: the product’s web frontend parameter handli...

CVE-2020-13911

The CVE-2020-13911 entry concerns Your Online Shop 1.8.0, where authenticated users can trigger a Cross‑Site Scripting (XSS) flaw via Change Name or Change Surname operations. The connected documents corroborate this XSS behavior but do not provide concrete technical details about the vulnerable ...