Beveiligingsadvies

CVE-2024-40746

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-21 16:16:32

Laatst bijgewerkt 2025-03-20 04:35:06

Toegewezen door Joomla

CVSS-score 5.4

Status PUBLISHED

Beschrijving

A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload in the `description` parameter of any product. The `description `parameter is not sanitised in the backend.

← Alle CVE's bekijken Bekijk op cve.org ↗