CVE-2022-35212

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-35212

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-35212

Published

2022-08-18T20:15:11.527Z

Modified

2025-11-14T13:25:00.659498Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tepdberror().

References

Affected packages

Type: GIT
Repo: https://github.com/oscommerce/oscommerce2
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

94e9e9efe7994bf88d8ade2e64881b4bfe1745d4

v2.*

v2.2ms2-060817

v2.2rc1

v2.2rc2

v2.2rc2a

v2.3

v2.3.1

v2.3.3

v2.3.4

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-35212.json"