← Back

Wstmart

wstmart

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Wstmart
wstmart
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20367
1Wstmart
1Wstmart
Nov 21, 2024
Dec 22, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The "mall some commodity details: commodity consultation" component in WSTMart 2.0.8_181212 has stored XSS via the consultContent parameter, as demonstrated by the index.php/home/goodsconsult/add.html URI.
CVE-2018-19138
1Wstmart
1Wstmart
Nov 21, 2024
Nov 9, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.