CVE-2019-8290: Online Store System Project Online Store System

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allowing special characters to be included and an XSS payload to be injected.

Affected products

Published 2019-10-01. Last modified 2026-06-17.