Description
Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- zencart-unspecified-xss(31202) vdb-entry
- http://www.zen-cart.com/forum/showthread.php?t=54615
- 21842 vdb-entry
- 23482 third-party-advisory
- ADV-2007-0022 vdb-entry