Описание
Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:zen-cart:zen_cart:1.3.0.0:*:*:ja:*:*:*:*
cpe:2.3:a:zen-cart:zen_cart:1.3.0.1:*:*:ja:*:*:*:*
cpe:2.3:a:zen-cart:zen_cart:1.3.0.2:*:*:ja:*:*:*:*
cpe:2.3:a:zen-cart:zen_cart:1.5.0:*:*:ja:*:*:*:*
cpe:2.3:a:zen-cart:zen_cart:1.5.1:*:*:ja:*:*:*:*
EPSS
Процентиль: 63%
0.00443
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php.
EPSS
Процентиль: 63%
0.00443
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79