villagedefrance/OpenCart-Overclocked

villagedefrance/OpenCart-Overclocked

Releases28
Frequency1 month 3 weeks
Last Release
Stars32
OpenCart Overclocked Edition. Advanced Shopping Cart CMS based on OC v1.5.6.X source code.

CVE History

CVEPublishedCVSS v3CVSS v2
4.3 MEDIUM

OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be exploitable via Malicious input passed in GET parameter.