Cross-Site Scripting Vulnerability in Ecommerce-CodeIgniter-Bootstrap
CVE-2021-40975

6.1MEDIUM

Key Information:

Vendor: Ecommerce-codeigniter-bootstrap Project
Status: Ecommerce-codeigniter-bootstrap
Vendor: CVE Published:; 1 October 2021

🔔 Create Ecommerce-codeigniter-bootstrap Project Vulnerability Alert

What is CVE-2021-40975?

A cross-site scripting vulnerability exists in the Ecommerce-CodeIgniter-Bootstrap application that allows remote attackers to inject arbitrary web scripts or HTML via the 'search_title' parameter located in the products.php file. This exploitation can potentially lead to unauthorized actions or data exposure, emphasizing the necessity for immediate assessment and mitigation strategies for affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Boot...

x_refsource_MISC

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 1, 2021
Vulnerability Reserved
Sep 13, 2021

JSON

Ecommerce-codeigniter-bootstrap Project

What is CVE-2021-40975?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.