← Database

CVE-2008-4432

MEDIUM CVSS: 4.3 Published: 2008-10-03 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter.

Affected Platforms

Xoops XoopsRmsoft Minishop Module

Weakness Type

CWE-79

References