Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-44682
6.1
MEDIUMCVSS v3
Published
August 30, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to execute code by changing POST parameters.
gongfuxiang/shopxo
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发
GitHubShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发= 6.2.0NVD