Over 10 years we help companies reach their financial and branding goals. Engitech is a values-driven technology agency dedicated.

Gallery

Contacts

411 University St, Seattle, USA

engitech@oceanthemes.net

+1 -800-456-478-23

Twitter Facebook-f Pinterest-p Instagram

thirty bees – Stored cross-site scripting (XSS)

DATE

08.10.2023

Affected Vendor

thirsty bees – an open-source e-commerce platform https://thirtybees.com/ (GitHub page: https://github.com/thirtybees/thirtybees)

Affected Product

thirty bees Core

Vulnerable version

1.4.0

Fixed version

1.5.0

CVSS

6.9 Medium CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

Recommendations

Update to version 1.5.0 or newer

Vulnerability details

A stored cross-site scripting (XSS) vulnerability was discovered in the Core. 

CVE

Credits

Ulaş Deniz İlhan

References

Do you think the security of your data might be lacking? Let's find the best approach together.
Once you contact us, we will ask you about the project you want to secure.

NEED A CONSULTATION?

Contact Us