Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TechStore 安全漏洞
Vulnerability Description
TechStore是阿拉伯联合酋长国TechStore公司的一个订购软件平台。 TechStore 1.0版本存在安全漏洞，该漏洞源于id参数未经编码或清理，可能导致反射型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A