---
title: "CVE-2023-46495"
date: "2023-09-26T07:00:00+00:00"
url: "https://checkmarx.com/zero/vulnerabilities/cve-2023-46495/"
---

# CVE-2023-46495

[Disclosed vulnerabilities](https://checkmarx.com/zero/vulnerabilities/)

Fixed: Sep 26, 2023

CVE-2023-46495  **Published:** Sep 26, 2023

6.1 Medium Severity js npm reflected XSS

MT Mário Teixeira  Reported by Checkmarx Zero

Details Overview

## Summary

NPM’s package `@evershop/evershop` prior to 1.0.0-rc.8 contains a Reflected Cross-Site Scripting (XSS) vulnerability. Attackers can exploit this issue by adding a second “sortBy” parameter to the request. This unexpected behavior will return the second “sortBy” value in the page’s code, potentially enabling the successful execution of XSS payloads.

## Product

This vulnerability affects NPM’s package `@evershop/evershop` in versions prior to 1.0.0-rc.8.

## Impact

This issue enables an attacker to execute an unauthorized JavaScript code in the browser.

## Steps to reproduce

1. Install the `@evershop/evershop` package dependency for any version prior to 1.0.0-rc.8
2. Run the EverShop Web Application on localhost
3. Navigate to the endpoint `category/men`
4. Use the following query parameter: `sortBy=name&sortBy=<script>alert('XSS')</script>`

### Expected result:

A pop-up alert with the message “XSS” will appear.

## Remediation

A fix was released in commit [5aa38b0](https://github.com/evershopcommerce/evershop/commit/5aa38b0d4f549f7badb9c8843a6c9d9280b83f6d), where input validation was implemented to protect against XSS. Users are recommended to upgrade to version 1.0.0-rc.8, which includes this fix.

## Credit

This issue was discovered and reported by Checkmarx SCA Security Analyst [Mário Teixeira](https://www.linkedin.com/in/marioleitao-teixeira/).

## Resources

1. [Pull Request](https://github.com/evershopcommerce/evershop/pull/338)
2. [Commit](https://github.com/evershopcommerce/evershop/commit/5aa38b0d4f549f7badb9c8843a6c9d9280b83f6d)

0  Medium Severity CVSS v3.1 Score

   6.1

CVSS v3.1 Vectors- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Changed
- Confidentiality Impact: Low
- Integrity Impact: Low
- Availability Impact: None

Advisory Timeline1. Discovered Mar 17, 2023
2. Disclosed May 18, 2023 The vulnerability was privately disclosed to the maintainer
3. Fixed Sep 26, 2023 A fix commit was released with the vulnerability fix.

## Explore more findings

[27 Nov 2025 CVE-2025-34281  Stored Cross-Site Scripting (XSS) in ThingsBoard   6.2  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-34281/) [17 Jan 2025 CVE-2025-0825  HTTP Response Splitting in cpp-httplib   6.9  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-0825/) [17 Jun 2025 CVE-2025-6050  Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface   4.8  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-6050/) [12 Dec 2024 CVE-2024-8374  Code Injection in UltiMaker Cura   7.8  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-8374/) [14 Nov 2024 CVE-2024-52526  Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-52526/) [14 Nov 2024 CVE-2024-51497  Stored Cross-site Scripting in @LibreNMS/LibreNMS Custom OID Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51497/) [14 Nov 2024 CVE-2024-51496  Reflected Cross-site Scripting in @LibreNMS/LibreNMS /wireless and /health endpoints   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51496/) [  14 Nov 2024 CVE-2024-51495  Stored Cross-site Scripting in @LibreNMS/LibreNMS Device Overview `overwrite\_ip` Field   7.5  Visit the page ](https://checkmarx.com/zero/vulnerabilities/cve-2024-51495/) [14 Nov 2024 CVE-2024-51494  Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51494/) [14 Nov 2024 CVE-2024-50352  Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Section of Device Overview   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50352/) [14 Nov 2024 CVE-2024-50351  Reflected Cross-site Scripting in @LibreNMS/LibreNMS Logs Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50351/) [14 Nov 2024 CVE-2024-50350  Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings Port Group   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50350/)