Vulnerability Details CVE-2012-5226
Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) motclef parameter to achat/recherche.php or (2) PATH_INFO to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.2%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2012-5226
-
cpe:2.3:a:peel:peel_shopping:2.8
-
cpe:2.3:a:peel:peel_shopping:2.9