CVE-2008-3560: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in kshopsearch.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30576/info Kshop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...