CVE-2014-3846

CVE-2014-3846 describes a cross-site scripting (XSS) vulnerability in Flying Cart where remote attackers can inject arbitrary web script or HTML via the p parameter to index.php. The affected element is the web-facing application logic handling p in index.php, enabling potential script execution ...