CVE-2014-7183 Multiple cross-site scripting (XSS) vulnerabilities in the search.php in LiteCart 1.1.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query parameter or (2) Q...
MediumCVSS 4.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the search.php in LiteCart 1.1.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query parameter or (2) QUERY_STRING.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| litecart | <= 1.1.2.1 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20151119 Re: LiteCart 1.3.2: Multiple XSS mailing-list third-party-advisory vdb-entry
- 20141020 LiteCart Security Advisory - Multiple XSS Vulnerabilities - CVE-2014-7183 mailing-list
- 70662 exploit third-party-advisory vdb-entry
- www.netsparker.com exploit third-party-advisory vdb-entry