AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-28560

MEDIUM · CVSS 5.4 EPSS 0.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-03-22 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.4. It involves a SQL injection risk.

CVE
CVE-2024-28560
Severity
MEDIUM
CVSS
5.4
EPSS
0.46%

Original NVD Description

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php component.

Related CVEs

Other vulnerabilities affecting the same vendor(s)