stavyan/TinyShop-UniApp

stavyan/TinyShop-UniApp

GitHubGitHub
GitHubgithub.com
h5.tinyshop.rageframe.comh5.tinyshop.rageframe.com
Releases0
Stars1.78K
基于 RageFrame2 的一款免费开源的基础商城销售功能的开源微商城。
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-24026↗
6.1 MEDIUM4.3 MEDIUM

TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely, resulting in cross-site scripting (XSS) or information disclosure.