Description
Reflected Cross-Site Scripting (XSS) vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user, through "/eyes? [XSS_PAYLOAD]".
Remediation
References
Related Vulnerabilities
PHP Improper Input Validation Vulnerability (CVE-2014-9653)
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-8155)
Phusion Passenger Other Vulnerability (CVE-2014-1831)
WebLogic CVE-2010-4453 Vulnerability (CVE-2010-4453)
IBM WebSEAL Insertion of Sensitive Information into Log File Vulnerability (CVE-2017-1480)