Description
Cross-site scripting (XSS) vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
References
- 20080821 DXShopCart V4.30mc search.php XSS mailing-list
- 30790 vdb-entry
- dxshopcart-search-xss(44587) vdb-entry