CVE-2022-4599— Shoplazza LifeStyle 跨站脚本漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-4599の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Shoplazza LifeStyle Product cross site scripting
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability was found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/api/theme-edit/ of the component Product Handler. The manipulation of the argument Subheading/Heading/Text/Button Text/Label leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-216194 is the identifier assigned to this vulnerability.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
对消息或数据结构的处理不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Shoplazza LifeStyle 跨站脚本漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Shoplazza LifeStyle是Shoplazza公司的一个电子商务网站。 Shoplazza LifeStyle 1.1版本存在安全漏洞，该漏洞源于对参数Subheading/Heading/Text/Button Text/Label的错误操作导致跨站点脚本编写。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-4599の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-4599のインテリジェンス情報
请登录查看更多情报信息。
CVE-2022-4599 厂商安全公告 (1)
CVE-2022-4599 邮件列表归档 (2)
Same Patch Batch · Shoplazza · 2022-12-18 · 6 CVEs total
| CVE-2022-4597 | 3.5 LOW | Shoplazza LifeStyle Create Product v2_products cross site scripting |
| CVE-2022-4598 | 3.5 LOW | Shoplazza LifeStyle Announcement cross site scripting |
| CVE-2022-4600 | 3.5 LOW | Shoplazza LifeStyle Product Carousel cross site scripting |
| CVE-2022-4601 | 3.5 LOW | Shoplazza LifeStyle Shipping/Member Discount/Icon cross site scripting |
| CVE-2022-4602 | 3.5 LOW | Shoplazza LifeStyle Review Flow cross site scripting |
IV. 関連脆弱性
同じ製品: LifeStyle
- CVE-2022-4597
Shoplazza LifeStyle Create Product v2_products cross site sc - CVE-2022-4598
Shoplazza LifeStyle Announcement cross site scripting - CVE-2022-4600
Shoplazza LifeStyle Product Carousel cross site scripting - CVE-2022-4601
Shoplazza LifeStyle Shipping/Member Discount/Icon cross site - CVE-2022-4602
Shoplazza LifeStyle Review Flow cross site scripting
同じベンダー: Shoplazza
- CVE-2022-4597
Shoplazza LifeStyle Create Product v2_products cross site sc - CVE-2022-4598
Shoplazza LifeStyle Announcement cross site scripting - CVE-2022-4600
Shoplazza LifeStyle Product Carousel cross site scripting - CVE-2022-4601
Shoplazza LifeStyle Shipping/Member Discount/Icon cross site - CVE-2022-4602
Shoplazza LifeStyle Review Flow cross site scripting
同じ弱点: CWE-707
- CVE-2026-4249
Denial of Service via Malicious JSON Payloads in Throttling - CVE-2025-66545
Nextcloud Groupfolders users with read-only permissions for - CVE-2025-26633
Microsoft Management Console Security Feature Bypass Vulnera - CVE-2024-43572
Microsoft Management Console Remote Code Execution Vulnerabi - CVE-2022-4729
Graphite Web Template Name cross site scripting
V. CVE-2022-4599へのコメント
まだコメントはありません