Supersmart Supersmart.me - Walk Through
2 CVEs affecting Supersmart Supersmart.me - Walk Through. Latest disclosed: 2022-08-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-34768 | Medium | 6.5 | 2022-08-05 | insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code. |
CVE-2022-30628 | Medium | 4.8 | 2022-07-21 | It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKE… |