Read the docs

Soteshop

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Soteshop records in CISA KEV

No Soteshop vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-01529 CVE-2025-1776 · GHSA-j2fg-56xp-h6wh

Cross-site scripting in Soteshop

Priority LOW 27

Cross-Site Scripting (XSS) vulnerability in Soteshop, versions prior to 8.3.4, which could allow remote attackers to execute arbitrary code via the ‘query’ parameter in /app-google-custom-search/searchResults.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00344 Published 2025-02-28 Fixed in 8.3.4 CWE-79
Open these records in search →