Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2vrr-2g3v-v4gc

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

EPSS

Процентиль: 72%
0.00717
Низкий

Связанные уязвимости

nvd
около 23 лет назад

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

EPSS

Процентиль: 72%
0.00717
Низкий