CVE-2009-3592

CVE-2009-3592 is a documented XSS in Qualiteam X-Cart. The vulnerability affects the customer/home.php path via the email parameter in a subscribed action, allowing remote attackers to inject arbitrary script/HTML. This is a distinct vector from CVE-2005-1823. The entry carries a MEDIUM risk (CVS...