Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote malicious users to inject arbitrary web script or HTML via the (1) currency_id_left, (2) currency_id_right, (3) darkcolor, (4) lightcolor, (5) middlecolor, and (6) w parameters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
webasyst shop-script - |