TI-2011-04463 CVE-2011-5186 · GHSA-g94j-pq29-2j53Cross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7…Priority LOW 23Cross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to inject arbitrary web script or HTML via the item_id parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01332 · Published 2012-09-20 · No fix listed CWE-79