CVE-2022-4599

MEDIO 5.4CVE-2022-4599 · Published 18/12/2022 · updated 17/06/2026

In breve

CVE-2022-4599 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda lifestyle (shoplazza).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.55%, superiore al 45.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
lifestyle shoplazza	`= 1.1`	No fix yet

Description

A vulnerability was found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/api/theme-edit/ of the component Product Handler. The manipulation of the argument Subheading/Heading/Text/Button Text/Label leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-216194 is the identifier assigned to this vulnerability.

References

seclists.org/fulldisclosure/2022/Dec/11 · Mailing List
seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txt · Mailing List
vuldb.com · Third Party Advisory

Altre vulnerabilità di lifestyle

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

lifestyle

shoplazza

= 1.1

No fix yet

Description

Altre vulnerabilità di lifestyle

Vedi tutto →