Skip to content
Threat Feed
Subscribe

Vendor

J2Commerce

1 brief RSS
high advisory

Stored XSS in J2Commerce via Guest Checkout Filter Bypass

J2Commerce versions 4.1.5 and earlier are vulnerable to stored XSS via guest checkout, allowing unauthenticated attackers to execute malicious JavaScript in the administrator's browser upon order review.

J2Commerce xss web-vulnerability
1r 2t 1c