CVE-2011-4547
Zen-cart Zen Cart - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common/tpl_header_test_info.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the (1) main_page parameter or (2) PATH_INFO, a different vulnerability than CVE-2011-4567.
Scores
EPSS
0.0025
EPSS Percentile
48.5%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
zen-cart/zen_cart
n/a/n/a
Timeline
Published
Nov 29, 2011
Tracked Since
Feb 18, 2026