TI-2012-03618 CVE-2012-4236 · GHSA-897c-qrwm-m638Cross-site scripting (XSS) vulnerability in the refresh_page function in…Priority LOW 23Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in Total Shop UK eCommerce Open Source before 2.1.2_p1 allows remote attackers to inject arbitrary web scr…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01633 · Published 2012-08-20 · No fix listed CWE-79
