CVE-2024-57277
InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com
- web github.com
- web youtu.be