CVE-2014-3846

2014-05-2215:00:00

mitre

www.cve.org

cross-site scripting

flying cart

index.php

web script

html

vulnerability

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

52.8%

JSON

Cross-site scripting (XSS) vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php.

References

packetstormsecurity.com/files/126735/flyingcart-xss.txt

www.securityfocus.com/bid/67529