Summary

AbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as demonstrated by a /apparel--accessories?sort= substring.

Affected products

Does this affect you?

Add your gear to cvedb and we'll alert you only when abantecart ships something exploited.

References

• NVD entry
• CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.