Cross site scripting

2012-08-1520:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

JSON

Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter.

CPENameOperatorVersion
x-carteq4.5

CPE	Name	Operator	Version
	x-cart	eq	4.5

References

osvdb.org/84115

secunia.com/advisories/50006

www.securityfocus.com/bid/54628

exchange.xforce.ibmcloud.com/vulnerabilities/77146

www.exploit-db.com/exploits/20010