CVE-2010-3465 Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and....
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and the (2) type parameter to SearchResults.aspx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecommercesoft xse shopping cart | = 1.5.2.1 | No fix listed |
| ecommercesoft xse shopping cart | = 1.5.3.0 | No fix listed |
References
- 68029 vdb-entry
- 68030 vdb-entry
- pridels-team.blogspot.com
- 41453 third-party-advisory vendor-advisory
- xseshoppingcart-multiple-xss(61828) vdb-entry