Description (CNA)
Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim's browser context when they visit a crafted URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| loadedcommerce / Loaded Commerce | affected 6.6 |
CWE
CWE-78
References
- https://www.exploit-db.com/exploits/52084
- https://loadedcommerce.com/
- https://www.vulncheck.com/advisories/loaded-commerce-66-client-side-template-injectioncsti
ADP enrichment
No English description supplied.
No references supplied.