CVE-2019-8288

Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
larry_cashdollarCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
VendorProductVersion
online_store_system_projectonline_store_system
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2019/10/02/1
http://www.vapidlabs.com/advisory.php?v=210
https://www.abcprintf.com/view_download.php?id=17
http://www.openwall.com/lists/oss-security/2019/10/02/1
http://www.vapidlabs.com/advisory.php?v=210
https://www.abcprintf.com/view_download.php?id=17