Cosmetics And Beauty Product Online Store vulnerabilities
2 known vulnerabilities in Cosmetics And Beauty Product Online Store from Cosmetics And Beauty Product Online Store Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score
Latest first
- 9.6 Critical severity
cosmetics_and_beauty_product_online_store: Improper Neutralization of Input During Web Page Generation
A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter.
- 9.6 Critical severity
Cosmetics And Beauty Product Online Store: Improper Neutralization of Input During Web Page Generation
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the search parameter under the /cbpos/ app.