medium6.1
CVE-2024-57556
Cross Site Scripting vulnerability in store2
Impact
Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | store2 | < 2.14.4 | 2.14.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nbubna | Store | through 2.14.2 |