CVE-2023-54349CWE-79

AmazCart CMS 3.4 Reflected Cross-Site Scripting via Search

Medium · published May 5, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
17.4
In the wild
Unconfirmed
What it is

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when search history is viewed or results are displayed.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00265 · 17.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-05-05T11:24Z
EPSS history
Timeline
  • 05 MAY 11:24Z
    AmazCart CMS 3.4 Reflected Cross-Site Scripting via Search
    cvelistv5