Veille CVE

Recherche « Etoilewebdesign Ultimate Product Catalogue »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Etoilewebdesign Ultimate Product Catalogue » ✕
  1. CVE-2021-47924 6.4 Moyenne

    Etoilewebdesign Ultimate Product Catalogue

    Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.