CVE-2012-6458: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary web script or HTML via the 1 FirstName, 2 Surname, or 3 Email parameter to code/forms/OrderFormAddress.php; or the 4 FirstName or 5 Surname...

PT-2013-1951

Name of the Vulnerable Software and Affected Versions SilverStripe e-commerce module version 3.0 for SilverStripe CMS Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including FirstName, Surname, and Email to...