PT-2014-6282

Name of the Vulnerable Software and Affected Versions ol-commerce version 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the a country parameter in a process action to "affiliate signup.php" or the entry country id parameter in...