CVE-2010-1541

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-26 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category and (2) list_quantity parameters to index.php, and the (3) category parameter to your.order.php.

Affected products

Dragonfrugal Dfd Cart: through 1.198; 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.192 (+5)

References

http://holisticinfosec.org/content/view/135/45/
http://osvdb.org/62671
http://osvdb.org/62672
http://secunia.com/advisories/38635
http://www.securityfocus.com/bid/38505
http://holisticinfosec.org/content/view/135/45/
http://osvdb.org/62671
http://osvdb.org/62672
http://secunia.com/advisories/38635
http://www.securityfocus.com/bid/38505

Get alerted when CVE-2010-1541 or the next vulnerability affects your stack