CVE-2005-4314

CVE-2005-4314 describes a cross-site scripting (XSS) vulnerability in the ppcal.cgi component of PPCal Shopping Cart 3.3.0 and earlier. The vulnerability allows an attacker to inject arbitrary web script or HTML via the (1) stop and (2) user parameters. Evidence from NVD states a medium severity ...