Описание
Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.
Уязвимые конфигурации
Конфигурация 1Версия до 1.30a (включая)
cpe:2.3:a:caupo.net:cauposhop:*:*:*:*:*:*:*:*
EPSS
Процентиль: 72%
0.00717
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.
EPSS
Процентиль: 72%
0.00717
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other