Skip to content
OpenAdvisories

Vendor

mindstellar

1 known vulnerabilities.

Products

shopclass 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-104479

    Shopclass before 6.2.0 Stored XSS via Listing Description Field

    Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self-registered non-admin users to inject scripts into item listing descriptions when frontend TinyMCE is enabled. Attackers can submit malicious JavaScript, which ItemAct…

    mindstellar shopclass