Description
Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Links and (2) Links Submit pages.
References
- creloaded-links-linkssubmit-xss(42888) vdb-entry
- 29786 vdb-entry
- 30655 third-party-advisory
- http://oscommerceuniversity.com/lounge/index.php?topic=249.0