Cross site scripting

Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway eCommerce 1.4.1.171 allows remote attackers to inject arbitrary web script or HTML via the searchlink parameter...

CVE-2008-3841

Technical details about CVE-2008-3841 are not publicly available in the provided connected documents. The initial description notes an XSS in Freeway eCommerce 1.4.1.171, but no vendor/versions/impact/fix are elaborated here. Monitor for updates.

CVE-2008-3678

CVE-2008-3678 is a cross-site scripting (XSS) vulnerability in Freeway prior to 1.4.2.197, specifically in admin/search_links.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, enabling script execution in the context of the affected user. The public referen...