CVE-2022-35212

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error()

published August 18, 2022

CVSS
—
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00548 · 45.1th percentile
Published
2022-08-18T19:30Z
EPSS history
Timeline
  • 18 AUG 19:30Z
    osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error()
    cvelistv5