Description
Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.
Remediation
References
Related Vulnerabilities
YetiForce CRM Improper Input Validation Vulnerability (CVE-2021-4117)
TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55921)
GlassFish CVE-2011-3559 Vulnerability (CVE-2011-3559)
WordPress Plugin AccessPress Social Icons Multiple SQL Injection Vulnerabilities (1.6.6)
Magento Improper Authorization Vulnerability (CVE-2020-24405)