| Package | Affected versions | Patched versions |
|---|---|---|
| zencart/zencart | < 1.5.7a | 1.5.7a |
| zen cart | = 1.5.6d |
Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free