📦 Smartstore

This is a stored cross-site scripting (XSS) vulnerability in SmartStoreNET's private messaging feature. Attackers can inject malicious scripts into private messages that execute when viewed by adminis...

This vulnerability allows attackers to inject malicious HTML/JavaScript into forum posts in SmartStoreNET e-commerce platforms. When exploited, it enables cross-site scripting (XSS) attacks that can l...

This CVE describes an authentication bypass vulnerability in Smartstore Web API due to a missing authentication attribute. Attackers can access administrative API endpoints without credentials, potent...