Skip to content
NewA calmer, faster ZeroHour

[webapps] CubeCart 6.7.4 - Stored XSS

Exploit-DB ()2
AI summary · glm-5.3-flashSummaries by Vani AI

A proof-of-concept stored cross-site scripting exploit targeting CubeCart 6.7.4 was published on Exploit-DB.

Exploit-DB lists a proof-of-concept exploit for a stored cross-site scripting (XSS) vulnerability in CubeCart 6.7.4, a PHP-based e-commerce web application. The listing demonstrates injection of attacker-controlled script that persists in the application, but no exploitation in the wild or CVE assignment is reported in the provided text.

Key facts
  • Stored XSS PoC published for CubeCart 6.7.4
  • No in-the-wild exploitation reported
  • Administrators should upgrade CubeCart beyond 6.7.4
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

Exploit-DB

exploit-db.com

Read the full article at Exploit-DB

This source shares headlines only. Summary, key facts and assessment above are AI-written from the article and can be wrong.