Cross-site scripting (XSS) vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script or HTML via the strCatalog_NAME parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Metacart_e-shop | Metalinks | * | * |