| Package | Affected versions | Patched versions |
|---|---|---|
| cart32 | = 2.5a= 2.6= 3.0= 3.1= 3.5= 3.5_build619= 3.5a= 3.5a_build710= 4.4= 5.0 |
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free