Unscored CVE-2008-4637 EUVD-2008-4617GHSA-cmpf-g8wv-3q9m

Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unkn…

Published Oct 21, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121.

References

http://cpcommerce.cpradio.org/
cpcommerce-advancedsearch-xss(46090) vdb-entry