A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form.

Published Oct 11, 2022 · Updated May 20, 2025 · Assigned by mitre