CVE-2009-1320
Zazzle Store Builder - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) gridPage and (2) gridSort parameters. NOTE: some of these details are obtained from third party information.
Scores
EPSS
0.0030
EPSS Percentile
52.7%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
zazzle/store_builder
n/a/n/a
Timeline
Published
Apr 17, 2009
Tracked Since
Feb 18, 2026