| Package | Affected versions | Patched versions |
|---|---|---|
| cp | = 2016.1 |
An XSS issue was discovered in Sandoba CP:Shop v2016.1. The vulnerability is located in the `admin.php` file of the `./cpshop/` module. Remote attackers are able to inject their own script codes to the client-side requested vulnerable web-application parameters. The attack vector of the vulnerability is non-persistent and the request method to inject/execute is GET with the path, search, rename, or dir parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free