Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the name parameter (Full Name field).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cpcommerce cpcommerce |