Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fpvx-g24w-mpgm

Опубликовано: 25 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerability arises because input in the blog's editor is not properly sanitized or escaped before being rendered. This allows attackers to inject malicious JavaScript code

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerability arises because input in the blog's editor is not properly sanitized or escaped before being rendered. This allows attackers to inject malicious JavaScript code

EPSS

Процентиль: 9%
0.00032
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
7 месяцев назад

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerability arises because input in the blog's editor is not properly sanitized or escaped before being rendered. This allows attackers to inject malicious JavaScript code

EPSS

Процентиль: 9%
0.00032
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79