Description
Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gv_send action to index.php, a different vulnerability than CVE-2011-4547.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce Upload My File Cross-Site Request Forgery (0.3.9)
SharePoint CVE-2023-36894 Vulnerability (CVE-2023-36894)
Oracle Database Server CVE-2014-6454 Vulnerability (CVE-2014-6454)
WordPress Plugin File Manager Multiple Vulnerabilities (4.8)
WordPress Plugin Easy2Map Photos Multiple Vulnerabilities (1.0.9)