Back to Database
Status published
Unknown
CVE-2022-36244
Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services
Vulnerability Description
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-36244
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Shop Beat thanks Emirates National Oil Company Limited (ENOC) LLC for the above discovery.
References
More from Shop Beat
View All →CVE-2022-36250
Cross Site Request Forgery on Shop Beat Services
Unknown
0
CVE-2022-36249
Shop Beat Services Vulnerable To Bypass 2FA via APIs
Unknown
0
CVE-2022-36247
Shop Beat Services Vulnerable To IDOR
Unknown
0
CVE-2022-36246
Shop Beat Services Vulnerable To Insecure Permissions
Unknown
0
CVE-2022-36243
Directory Traversal on Shop Beat Services
Unknown
0
Affected Vendor
Shop Beat
View all reports →Affected Software
studio
Vulnerable Versions:
studio
Timeline
Official Publish:
May 30th, 2023
Last Modified:
January 13th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available