漏洞描述
Adobe Commerce and Magento Open Source中存在存储型跨站脚本漏洞。该漏洞是由于在结帐页面上显示给用户的传输策略中对用户数据进行了不正确的清理。
Adobe Commerce and Magento Open Source Shipping Policy 存储型跨站脚本漏洞
PoC代码
暂无相关漏洞推荐
- POC magento-debug-log-exposure: Magento Debug Log - Exposure
- POC wp-woocommerce-admin-fpd: WordPress Plugin WooCommerce Admin (woocommerce-admin) Full Path Disclosure
- JeecgBoot积木报表getDataSourceByPage接口存在敏感信息泄露漏洞
- POC CVE-2024-4455: YITH WooCommerce Ajax Search <= 2.4.0 - Cross-Site Scripting
- POC wp-flexible-shipping-log: WordPress Flexible Shipping - Log File Exposure
- POC aem-jcr-exposure: Adobe AEM JCR Compare Exposure
- POC wp-yith-woocommerce-wishlist-fpd: WordPress YITH WooCommerce Wishlist - Full Path Disclosure
- POC magento-downloader-fpd: Magento Downloader - Full Path Disclosure
- 东胜物流软件 FeeModifySource.aspx SQL注入漏洞
- 东胜物流管理软件 FeeModifySource.aspx 存在SQL注入漏洞
- 东胜物流软件 /Shipping/FeeModifySource.aspx SQL 注入漏洞
- POC wp-woocommerce-admin-fpd: WordPress Plugin WooCommerce Admin (woocommerce-admin) Full Path Disclosure
- 青岛东胜伟业软件有限公司东胜物流软件AttributeGridSource.aspx checkcompid存在SQL注入漏洞