Cross Site Scripting Vulnerability in Likeshop Up to 2.5.7
CVE-2024-5766

4.8MEDIUM

Key Information:

Vendor: Likeshop
Status: Likeshop
Vendor: CVE Published:; 8 June 2024

🔔 Create Likeshop Vulnerability Alert

What is CVE-2024-5766?

A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin of the component Merchandise Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-267449 was assigned to this vulnerability.

Affected Version(s)

Likeshop 2.5.0

Likeshop 2.5.1

Likeshop 2.5.2

References

https://vuldb.com/?id.267449

https://vuldb.com/?ctiid.267449

signaturepermissions-required

https://gitee.com/likeshop_gitee/likeshop/issues/I9TAHP

CVSS V3.1

Score:

4.8

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 8, 2024
Vulnerability Reserved
Jun 7, 2024

Credit

VulDB Gitee Analyzer

CVE-2024-5766 Data

.