CVE-2008-1458

Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected.

Affected products

Cs-Cart

Cs-cart

= 1.3.2

Fix

Available

CVSS 2.0

4.3 MEDIUM

EPSS

1.5% (72th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2008-03-24