PT-2026-55710 · Kirilkirkov · Ecommerce-Codeigniter-Bootstrap
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
kirilkirkov Ecommerce-CodeIgniter-Bootstrap versions up to 213babdbaa949e94557246414db0130e01394517
Description
A remote cross site scripting issue exists in the Subscribed Emails Admin Page component. The flaw is located in the
checkForPostRequests() function within the application/core/MY Controller.php file. An attacker can trigger this by manipulating the User-Agent variable.Recommendations
Apply patch 23105f25dadf57b4314fc015a63a7c6e910c89df to resolve the issue.
Exploit
Fix
XSS
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ecommerce-Codeigniter-Bootstrap