CVE-2017-8833

NONE EPSS 48.0%

Published May 8, 20179y ago · Modified Jun 17, 20262w ago

Published May 8, 2017 9y ago

Last Modified Jun 17, 2026 2w ago

Description

Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."

Threat Intelligence

EPSS Exploit Probability

48.0% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

Vendor	Product	Version	Range
zen-cart	zen_cart	1.6.0	any

References 1

github.com https://github.com/zencart/zencart/issues/1431

ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.