A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is the function basic_cart_checkout_form_submit of the file basic_cart.cart.inc. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.x-1.1.1 is able to address this issue. The patch is identified as a10424ccd4b3b4b433cf33b73c1ad608b11890b4. It is recommended to upgrade the affected component. VDB-217950 is the identifier assigned to this vulnerability.
References
Link | Resource |
---|---|
https://github.com/backdrop-contrib/basic_cart/commit/a10424ccd4b3b4b433cf33b73c1ad608b11890b4 | Patch Third Party Advisory |
https://github.com/backdrop-contrib/basic_cart/releases/tag/1.x-1.1.1 | Release Notes Third Party Advisory |
https://vuldb.com/?ctiid.217950 | Third Party Advisory |
https://vuldb.com/?id.217950 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: VulDB
Published: 2023-01-11T06:21:17.015Z
Updated: 2023-10-12T08:35:26.862Z
Reserved: 2023-01-11T06:21:02.837Z
Link: CVE-2012-10004
JSON object: View
NVD Information
Status : Modified
Published: 2023-01-11T07:15:09.917
Modified: 2024-05-17T00:51:45.420
Link: CVE-2012-10004
JSON object: View
Redhat Information
No data.
CWE