CVE-2011-4567

Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gv_send action to index.php, a different vulnerability than CVE-2011-4547.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.48% chance of exploitation in the next 30 days, 72th percentile

Published

2011-11-29

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/36346

References

• CVE Record
• NVD entry

Related

• CVE-2011-4564
• CVE-2011-4569
• CVE-2011-4561
• CVE-2011-4570
• CVE-2011-4559
• CVE-2011-4571