TI-2010-01956 CVE-2010-2040 · GHSA-7m99-hppq-9pj6Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate…Priority LOW 23Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01499 · Published 2010-05-25 · No fix listed CWE-79