Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass the security policy of the safety.php file, triggering the xss vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ECShop 跨站脚本漏洞
Vulnerability Description
ECShop是商派的一个开源商城系统。支持PC+H5+APP+小程序商城，源码免费下载体验，适合企业开发搭建商城。 ECShop 中存在跨站脚本漏洞，该漏洞源于security.php文件缺少安全过滤，导致系统中 user.php 文件中可以利用HTML实体编码绕过security .php文件的安全策略。攻击者可通过该漏洞执行客户端代码。以下产品及版本受到影响：ECShop 4.0。
CVSS Information
N/A
Vulnerability Type
N/A