aslanemre

2 exploits Active since Nov 2020

CVE-2020-29070 NOMISEC MEDIUM STUB

osCommerce 2.3.4.1 - Authenticated Stored Cross-Site Scripting in Newsletter Title

osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters.

2 stars

CVSS 4.8

View Code

CVE-2020-29364 NOMISEC MEDIUM STUB

NetArt News Lister 1.0.0 - Stored Cross-Site Scripting in News Headlines

In NetArt News Lister 1.0.0, the news headlines vulnerable to stored xss attacks. Attackers can inject codes in news titles.

1 stars

CVSS 4.8

View Code