Lucene search

K
cvelistMitreCVELIST:CVE-2010-1486
HistoryApr 22, 2010 - 2:00 p.m.

CVE-2010-1486

2010-04-2214:00:00
mitre
www.cve.org
5
xss
cactushop
invoice
remote attackers
web script
html

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

50.2%

Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the (1) billing address or (2) shipping address.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

50.2%