.. / CVE-2023-4547

• XSS
• Nuclei
• Web

Exploit for SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting (CVE-2023-4547)

Description:

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filter[brandid]/filter[price] leads to cross site scripting. The attack may be launched remotely. VDB-238058 is the identifier assigned to this vulnerability.

Nuclei Template

View the template here CVE-2023-4547.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-4547.yaml

References: