Vulnerabilities

TI-2014-03036 CVE-2014-3737 · GHSA-hf9p-ph6h-r575

Cross-site scripting (XSS) vulnerability in templates/defaultheader.php in Lamp Design…

LOW 17

Cross-site scripting (XSS) vulnerability in templates/defaultheader.php in Lamp Design Storesprite before 7 - 19-06-14, when using the currency selection dropdown, allows remote attackers to inject arbitrary web script o…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02097 Published 2014-07-02 No fix listed CWE-79

TI-2007-04167 CVE-2007-4307 · GHSA-gvvw-994f-q34f

Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbitrary web script or HTML via the next parameter to (1) addaddress.php, (2) editshipdetails.php, (3) re…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02275 Published 2007-08-13 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in templates/defaultheader.php in Lamp Design…

Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow…