| Package | Affected versions | Patched versions |
|---|---|---|
| cactushop | = 3= 4= 4.1= 4.5= 4.6= 4.7= 5.0= 5.1≤ 6.1 |
Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the (1) billing address or (2) shipping address.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free