Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Webasyst Shop-Script 跨站脚本漏洞
Vulnerability Description
Webasyst Shop-Script是Webasyst团队开发的一个基于PHP的购物车脚本和电子商务框架。 Webasyst Shop-Script 5.2.2.30933版本中存在跨站脚本漏洞，该漏洞源于phpecom/index.php/webasyst/contacts/ URL没有充分过滤新联系簿中‘phone number’字段。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A