TI-2009-02472 CVE-2009-2587 · GHSA-hc23-8qcx-6f4pMultiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote…Priority LOW 24Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to assets/js/ddcart.php, the (2) prefix parameter to includes/aj…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0226 · Published 2009-07-24 · No fix listed CWE-79