Approved changes feed: RSS · Atom

cpe:2.3:a:activeitzone:active_ecommerce_cms:6.5.0:*:*:*:*:*:*:*

part: a version: 6.5.0 update: *

VendorActiveitzone (38fd3047-b059-5a0f-a2ea-0bef0eff52f6)
ProductActive Ecommerce Cms (f97b402c-9b9e-5f55-bf12-1227054aa33a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3506 vulnerable 2026-06-03 14:52:41.025311 Active It Zone Active eCommerce CMS Create Ticket Page support_ticket cross site scripting
LOW (3.5)
A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ecommerce/support_ticket of the component Create Ticket Page. The manipulation of the argument details with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely. VDB-232954 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-07-04T16:00:04.180Z
Updated: 2024-08-02T06:55:03.643Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.