Cross-site Scripting Vulnerability in Zen Cart by Zen Cart
CVE-2011-4567

Currently unrated

Key Information:

Vendor

Zen-cart

Status
Zen Cart
Vendor
CVE Published:
29 November 2011

What is CVE-2011-4567?

A cross-site scripting (XSS) vulnerability exists in Zen Cart prior to version 1.5. This issue allows remote attackers to inject arbitrary web scripts or HTML through the 'message' parameter during the gv_send action to index.php. This flaw could lead to unauthorized actions performed on behalf of unsuspecting users, making user data and interactions subject to exploitation. It is essential for users of affected Zen Cart versions to apply necessary security patches and updates to mitigate risks associated with this vulnerability.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/71519
vdb-entryx_refsource_XF
https://www.dognaedis.com/vulns/DGS-SEC-8.html
x_refsource_MISC
http://www.securityfocus.com/bid/50787
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.