CVE-2017-10667: XSS
Published Jun 29, 2017
·Updated
In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS.
Affected Software
1 affected component
Zen-cart Zen Cart=1.6.0
Event History
Jun 29, 2017
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-10667?
CVE-2017-10667 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2017-10667?
To fix CVE-2017-10667, ensure that user input is properly sanitized and validated before being rendered in the application.
3
What software is affected by CVE-2017-10667?
CVE-2017-10667 specifically affects Zen Cart version 1.6.0.
4
What type of attack can CVE-2017-10667 lead to?
CVE-2017-10667 can lead to cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
5
How can I verify if my product ID is vulnerable to CVE-2017-10667?
You can verify if your product ID is vulnerable by testing URL parameters in Zen Cart 1.6.0 for unsanitized output.