Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-69r7-j2w2-g279

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office".

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office".

EPSS

Процентиль: 47%
0.0024
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 5 лет назад

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office".

EPSS

Процентиль: 47%
0.0024
Низкий

Дефекты

CWE-79