PT-2024-5686 · Netcat · Netcat Netshop Cms
Published
2024-07-16
·
Updated
2024-07-16
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Netcat Netshop CMS (affected versions not specified)
Description
The issue is related to the
promotion discount parameter in the Netcat Netshop CMS system, which is vulnerable to cross-site request forgery. This could allow a remote attacker to execute arbitrary JavaScript code in a user's browser.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Netcat Netshop Cms