CVE-2017-10886

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-17 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Cs-Cart: 4.0.1, 4.0.2, 4.0.3, 4.1.1, 4.1.2, 4.1.3 (+15)
Cs-Cart Multivendor: 4.0.1, 4.0.2, 4.0.3, 4.1.1, 4.1.2, 4.1.3 (+15)

References

http://tips.cs-cart.jp/fix-jvn-29602086.html
https://jvn.jp/en/jp/JVN29602086/index.html
http://tips.cs-cart.jp/fix-jvn-29602086.html
https://jvn.jp/en/jp/JVN29602086/index.html

Get alerted when CVE-2017-10886 or the next vulnerability affects your stack