Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-27776 EUVD-2023-31512GHSA-5mwq-xh9g-83gq

A stored cross-site scripting (XSS) vulnerability in /index.php?page=category_list of Online Jewelry Shop v1.0 allows attackers to execute …

Published Apr 19, 2023 · Updated Feb 5, 2025 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in /index.php?page=category_list of Online Jewelry Shop v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter.

References