GHSA-wxxx-2x6v-979f
Reflected XSS in Zen Cart before 1.5.7a
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | zencart/zencart | < 1.5.7a | 1.5.7a |
Details
As written in the advisory (Markdown source, shown as plain text).
Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to `includes/templates/template_default/common/tpl_main_page.php` or `includes/templates/responsive_classic/common/tpl_main_page.php.`
References
External links from the advisory. They lead to third-party sites.