PT-2012-3934

Name of the Vulnerable Software and Affected Versions Ubercart module versions 6.x-2.x before 6.x-2.8 Ubercart module versions 7.x-3.x before 7.x-3.1 Description The issue allows remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via...