TI-2005-01518 CVE-2005-1607 · GHSA-jcqj-9j4c-fgccCross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote…Priority LOW 33Cross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01457 · Published 2005-05-16 · No fix listed