CVE-2011-4567

Published: Nov 29, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gv_send action to index.php, a different vulnerability than CVE-2011-4547.

Affected (20)

Products: Zen Cart: Zen Cart

Zen Cart

1 product

Zen Cart

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Zen Cart Zen Cart	Up to 1.3.9
Zen Cart Zen Cart	Version 1.1.0
Zen Cart Zen Cart	Version 1.1.3
Zen Cart Zen Cart	Version 1.2.0d
Zen Cart Zen Cart	Version 1.2.1 patch1
Zen Cart Zen Cart	Version 1.2.1d
Zen Cart Zen Cart	Version 1.2.2d
Zen Cart Zen Cart	Version 1.2.3d
Zen Cart Zen Cart	Version 1.2.4.1
Zen Cart Zen Cart	Version 1.2.4d
Zen Cart Zen Cart	Version 1.2.5d
Zen Cart Zen Cart	Version 1.2.6d
Zen Cart Zen Cart	Version 1.3.0.2
Zen Cart Zen Cart	Version 1.3.2
Zen Cart Zen Cart	Version 1.3.5
Zen Cart Zen Cart	Version 1.3.6
Zen Cart Zen Cart	Version 1.3.7
Zen Cart Zen Cart	Version 1.3.8
Zen Cart Zen Cart	Version 1.3.8a
Zen Cart Zen Cart	Version 1.3