← Back

Tinyshop Project

tinyshop_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Tinyshop
tinyshop

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tinyshop Project
1Tinyshop
Jun 17, 2026
May 18, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page...Show more
TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely, resulting in cross-site scripting (XSS) or information disclosure.Show less