Back to Database
Status published
Unknown
CVE-2024-3579
XSS in Online Shopping System Advanced
Vulnerability Description
Open-source project Online Shopping System Advanced is vulnerable to Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-3579
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Krzysztof Zając (CERT.PL)
Affected Vendor
Puneeth Reddy
View all reports →Affected Software
Online Shopping System Advanced
Vulnerable Versions:
0
Timeline
Official Publish:
May 14th, 2024
Last Modified:
August 1st, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available