TI-2012-04411 CVE-2012-5225 · GHSA-5j5p-vmmc-8gmjCross-site scripting (XSS) vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2…Priority LOW 24Cross-site scripting (XSS) vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shopping_url parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01795 · Published 2012-10-01 · No fix listed CWE-79