← Database

CVE-2008-4121

MEDIUM CVSS: 4.3 Published: 2008-10-21 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofriend action to sendtofriend.php.

Affected Platforms

Cpcommerce Cpcommerce

Weakness Type

CWE-79

References