CVE-2024-57277: XSS
Published Jan 24, 2025
·Updated
InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload.
Affected Software
1 affected component
Innoshop Innoshop<0.3.8
Event History
Jan 24, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-57277?
CVE-2024-57277 is classified as a moderate severity vulnerability due to the potential exploitation of Cross Site Scripting (XSS).
2
How do I fix CVE-2024-57277?
To fix CVE-2024-57277, upgrade InnoShop to version 0.3.9 or later which addresses the XSS vulnerability in SVG file uploads.
3
What type of vulnerability is CVE-2024-57277?
CVE-2024-57277 is a Cross Site Scripting (XSS) vulnerability that allows attackers to execute malicious scripts via SVG file uploads.
4
Which versions of InnoShop are affected by CVE-2024-57277?
InnoShop versions up to and including 0.3.8 are affected by CVE-2024-57277.
5
What are the potential risks of CVE-2024-57277?
The potential risks of CVE-2024-57277 include unauthorized access to user sessions, sensitive information exposure, and the ability to perform actions on behalf of users.