CVE-2012-2570

Name of the Vulnerable Software and Affected Versions X-Cart Gold version 4.5

Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the symb parameter in the products map.php file.

Recommendations For X-Cart Gold version 4.5, consider restricting access to the products map.php file until a patch is available, or avoid using the symb parameter in this file to minimize the risk of exploitation.