Cross-Site Scripting Risk in NIUSHOP V1.11 by NIU Technologies
CVE-2019-16310

5.4MEDIUM

Key Information:

Vendor

Niushop

Status
Niushop
Vendor
CVE Published:
14 September 2019

What is CVE-2019-16310?

NIUSHOP V1.11 contains a vulnerability that allows for cross-site scripting (XSS) through the index.php?s=/admin URI. This security flaw could let attackers inject malicious scripts into web pages viewed by users, compromising their data and security. Organizations that utilize this product should apply necessary mitigations to safeguard against potential exploitation.

References

http://www.iwantacve.cn/index.php/archives/304/
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.