CVE-2023-26688

Published: 2024-09-25T01:15Z

Last Modified: 2024-09-26T13:32Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross Site Scripting (XSS) vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the product_data parameter of add/edit product in the administration interface. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt