Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00363·Published 2025-01-23·Fixed in 2.14.4CWE-79