CVE-2012-2570

2012-08-1520:00:00

certcc

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

JSON

Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter.

References

osvdb.org/84115

secunia.com/advisories/50006

www.exploit-db.com/exploits/20010

www.securityfocus.com/bid/54628

exchange.xforce.ibmcloud.com/vulnerabilities/77146