Medium severity6.1NVD Advisory· Published May 18, 2021· Updated Jun 17, 2026
CVE-2020-24026
CVE-2020-24026
Description
TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely, resulting in cross-site scripting (XSS) or information disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- TinyShop/TinyShopdescription
Patches
Vulnerability mechanics
References
1- github.com/jianyan74/TinyShop/issues/14nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.