← All advisories

Medium severity6.1NVD Advisory· Published Aug 18, 2022· Updated Jun 17, 2026

CVE-2022-35212

CVE-2022-35212

Description

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error().

Affected products

3

OsCommerce/Oscommerce2 versions
cpe:2.3:a:oscommerce:oscommerce:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oscommerce:oscommerce:*:*:*:*:*:*:*:*range: <2.3.4.1
- (no CPE)range: <2.3.4.1
osCommerce2/osCommerce2description

Patches

Vulnerability mechanics

References

1

forums.oscommerce.com/topic/497119-potencial-xss-vulnerability/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.