← Database

CVE-2010-1486

MEDIUM CVSS: 4.3 Published: 2010-04-22 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the (1) billing address or (2) shipping address.

Affected Platforms

Cactushop Cactushop

Weakness Type

CWE-79

References