← Database

CVE-2026-38939

MEDIUM CVSS: 6.1 Published: 2026-04-30 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the product_catalogue.php component

Affected Platforms

Unknown

Weakness Type

CWE-79

References