PT-2019-18965
CVE-2019-8288
·
تاريخ النشر
2019-10-01
·
تاريخ التحديث
2019-10-04
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Online Store version 1.0
Description
The issue concerns a Stored XSS in the user view.php file, where the
adidas member user variable is not properly sanitized.Recommendations
For Online Store version 1.0, ensure proper sanitization of the
adidas member user variable in the user view.php file to prevent Stored XSS attacks. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾