CVE-2010-5322

Published March 11th, 2015

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php.

ZeusCart/zeuscart

ZeusCart - PHP - MySQL Based Open Source Shopping Cart - Resposnive Design - GPL License

GitHub