|
|
AspDotNetStorefront ReturnURL Parameter Cross-Site Scripting Vulnerability
AspDotNetStorefront is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in the 'returnurl' parameter of the 'signin.aspx' script of the application and can allow remote attackers to steal cookie-based authentication credentials and carry out other attacks. AspDotNetStorefront 3.3 is reportedly affected by this issue, however, it is possible that other versions are affected as well. |
|
Privacy Statement |