Back to search
CVE-2024-40746
Published: Oct 21, 2024
Modified: Mar 20, 2025
PUBLISHED
Description
A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload in the `description` parameter of any product. The `description `parameter is not sanitised in the backend.
| Vendor | Product | Versions |
|---|---|---|
hikashop.com | HikaShop component for Joomla | affected 1.0.0-5.1.0 |
Weaknesses (CWE)
References
https://www.hikashop.com/
product
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now