CVE-2009-4856

CVE-2009-4856 describes a cross-site scripting (XSS) vulnerability in the PHP Easy Shopping Cart 3.1R, specifically in subitems.php where the name parameter can be manipulated to inject arbitrary script or HTML. The vulnerability allows remote attackers to execute injected code in the context of ...