Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2023-3506

Active It Zone Active eCommerce CMS Create Ticket Page support_ticket cross site scripting

Description

A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ecommerce/support_ticket of the component Create Ticket Page. The manipulation of the argument details with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely. VDB-232954 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Active It Zone Active eCommerce CMS

  • 6.5.0affected

References