CVE-2015-0882: XSS

Published Feb 27, 2015

Updated

Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/initincludes/initsanitize.php and includes/initincludes/initsanitize.php.

Affected Software

5 affected components

Zen-cart Zen Cart=1.3.0.0

Zen-cart Zen Cart=1.3.0.1

Zen-cart Zen Cart=1.3.0.2

Zen-cart Zen Cart=1.5.0

Zen-cart Zen Cart=1.5.1

Event History

Feb 27, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0882?

CVE-2015-0882 has been classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.

How do I fix CVE-2015-0882?

To mitigate CVE-2015-0882, update Zen Cart to the latest version that has patched these vulnerabilities.

What versions of Zen Cart are affected by CVE-2015-0882?

CVE-2015-0882 affects Zen Cart versions 1.3.0.0 to 1.3.0.2 and 1.5.0 to 1.5.1.

What types of attacks can result from CVE-2015-0882?

CVE-2015-0882 allows remote attackers to conduct cross-site scripting attacks, potentially leading to session hijacking or data manipulation.

Is there a vulnerability disclosure for CVE-2015-0882?

CVE-2015-0882 was disclosed publicly and is documented in various cybersecurity databases.