TI-2006-03041 CVE-2006-3141 · GHSA-vgwj-m2w4-mc94Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier…Priority LOW 23Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01299 · Published 2006-06-22 · No fix listed