PT-2014-7821
CVE-2014-7183
·
تاريخ النشر
2014-10-22
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
LiteCart versions 1.1.2.1 and earlier
Description
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the
query parameter or the QUERY STRING.Recommendations
For LiteCart versions 1.1.2.1 and earlier, consider updating to a version that contains a fix for this issue. As a temporary workaround, restrict access to the search.php file to minimize the risk of exploitation. Avoid using the
query parameter in the search.php file until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾