CVE-2023-48124: Nayem-Howlader Sup Online Shopping

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address parameters in the Register New Account component.

Affected products

Published 2023-11-21. Last modified 2026-06-17.