7.1
High
CVE-2024-32558 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| eCommerce Product Catalog 3.3 | earliest → 3.3.32 | No fix stated |
References
- patchstack.com patchstack.com
Timeline
- Published
- Last modified
Other CVEs of eCommerce Product Catalog
The 10 CVEs of eCommerce Product Catalog →
CVE-2026-116851
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions
7.1
High
CVE-2026-115596
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
7.1
High
CVE-2026-105056
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
6.5
Medium
CVE-2026-96344
Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions
7.2
High