medium4.3
CVE-2012-0311
Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Impact
Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oscommerce | Oscommerce | Versions 2.2ms1j-r1, 2.2ms1j-r2, 2.2ms1j-r3, 2.2ms1j-r4, 2.2ms1j-r5, 2.2ms1j-r6a |