CVE-2023-4406 | BDVDB-2026-217644 Detail

Description#

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KC Group E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-11-23Record published in the CVE List.
2. Version 22026-05-21Most recent update recorded in the CVE List.