Description
Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://www.cgis.biz/script_web_cart/notice200708.html
- webcart-unspecified-xss(35946) vdb-entry
- JVN#66303599 third-party-advisory
- 26382 third-party-advisory
- 25261 vdb-entry
- 36441 vdb-entry
- 1018554 vdb-entry