XSS in Webshophun Webshop Hun

CVE-2015-2244

Multiple cross-site scripting (XSS) vulnerabilities in Webshop hun 1.062S allow remote attackers to inject arbitrary web script or HTML via the (1) param, (2) center, (3) lap, (4) termid, or (5) nyelv_id parameter to index.php.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.019 (77.9th percentile) — read the EPSS interpretation.

Affected products

Webshophun Webshop_hun — versions 1.062s
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_FULLDISC)