Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter (Full Name field).
References
Configurations
Information
Published : 2007-05-31 18:30
Updated : 2018-10-16 09:46
NVD link : CVE-2007-2968
Mitre link : CVE-2007-2968
JSON object : View
CWE
Products Affected
cpcommerce
- cpcommerce