TI-2006-00228 CVE-2006-0237 · GHSA-23jx-3fx9-64w9Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote…Priority LOW 24Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) subcat parameters.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01736 · Published 2006-01-18 · No fix listed