ShopSite
Shopsite · 2 CVEs
CVE-2024-13510
MEDIUM
ShopSite <= 1.5.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Feb 4, 2025
CVE-2024-22550
MEDIUM
An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to ex…
Jan 26, 2024
CVE-2006-6485
MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow remote attackers to inject arbitr…
Dec 12, 2006
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-13510 | ShopSite <= 1.5.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting | MEDIUM | 0.16% | Feb 4, 2025 |
| CVE-2024-22550 | An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a cra… | MEDIUM | 0.57% | Jan 26, 2024 |
| CVE-2006-6485 | Multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the prevlocat… | MEDIUM | 1.94% | Dec 12, 2006 |
Showing 1 to 2 of 2 CVEs