CVE-2011-4812

BST Bestshoppro - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by CoBRa_21 · textwebappsphp

https://www.exploit-db.com/exploits/18063

View Code ZIP pw:eip

References (3)

[Vendor Advisory] http://secunia.com/advisories/46662

[Exploit] http://www.exploit-db.com/exploits/18063

[Exploit] http://www.osvdb.org/76880

Scores

EPSS 0.0046

EPSS Percentile 63.7%

Classification

CWE

CWE-79

Status published

Affected Products (2)

bst/bestshoppro

n/a/n/a

Timeline

Published Dec 14, 2011

Tracked Since Feb 18, 2026