Skip to content
OpenAdvisories
Low · 2.4 CVE-2024-5766 EUVD-2024-46918GHSA-x3p6-qcrr-6pv2

Likeshop Merchandise admin cross site scripting

Published Jun 8, 2024 · Updated Sep 3, 2024 · Assigned by VulDB

Description

A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin of the component Merchandise Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-267449 was assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
— Likeshop 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7 —

References