CVE-2024-57277

InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload

Medium · published January 24, 2025

CVSS v3.1
5.7
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.6th percentile
Published
2025-01-24T00:00Z
EPSS history
Timeline
  • 24 JAN 00:00Z
    InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload
    cvelistv5