JVN#44544694: Zen Cart Japanese version vulnerable to cross-site scripting

Zen Cart is an open source system for creating shopping websites. Zen Cart Japanese version contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the web browser of a user who is logged on as an administrator.

Solution

For Zen Cart v1.5 ja variants:
Update the software
Update to the latest version according to the information provided by the developer.

For Zen Cart v1.3 jp variants:
Apply the patch
Apply the appropriate patch according to the information provided by the developer.

Products Affected

• Zen Cart v1.5.1 ja and earlier
• Zen Cart v1.3.0.2 jp8 and earlier