mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-07 17:36:58 +02:00
725 B
725 B
CVE-2018-20848
Description
Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter.
POC
Reference
Github
No PoCs found on GitHub currently.