A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.
References
Link | Resource |
---|---|
http://exrick.com | Not Applicable URL Repurposed |
https://github.com/Exrick/xmall | Third Party Advisory |
https://github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp#L38 | Patch Third Party Advisory |
https://github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp#L4 | Patch Third Party Advisory |
http://exrick.com | Not Applicable URL Repurposed |
https://github.com/Exrick/xmall | Third Party Advisory |
https://github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp#L38 | Patch Third Party Advisory |
https://github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp#L4 | Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 06:29
Type | Values Removed | Values Added |
---|---|---|
References | () http://exrick.com - Not Applicable, URL Repurposed | |
References | () https://github.com/Exrick/xmall - Third Party Advisory | |
References | () https://github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp#L38 - Patch, Third Party Advisory | |
References | () https://github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp#L4 - Patch, Third Party Advisory |
14 Feb 2024, 01:17
Type | Values Removed | Values Added |
---|---|---|
References | () http://exrick.com - Not Applicable, URL Repurposed |
13 Apr 2022, 20:23
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.1 |
CPE | cpe:2.3:a:exrick:xmall:*:*:*:*:*:*:*:* | |
CWE | CWE-79 | |
References | (MISC) http://exrick.com - Not Applicable | |
References | (MISC) https://github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp#L38 - Patch, Third Party Advisory | |
References | (MISC) https://github.com/Exrick/xmall - Third Party Advisory | |
References | (MISC) https://github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp#L4 - Patch, Third Party Advisory |
07 Apr 2022, 19:50
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-04-07 19:15
Updated : 2024-11-21 06:29
NVD link : CVE-2021-43432
Mitre link : CVE-2021-43432
CVE.ORG link : CVE-2021-43432
JSON object : View
Products Affected
exrick
- xmall
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')