VULNERABILITY INTELLIGENCE

CVE-2024-28559

CVSS score8.8 HIGH

EPSS probability0.81%

CISA KEVNot currently listed

Published2024-03-22

Last modified2026-06-17

Description

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component.