ECW-Shop is prone to cross-site scripting attacks. An attacker could exploit this issue by constructing a malicious link with hostile HTML and script code embedded in URI parameters. This code may be rendered in the browser of a user who visits the malicious link. Exploitation could allow for theft of cookie-based authentication credentials or other attacks.
ECW-Shop is prone to cross-site scripting attacks. An attacker could exploit this issue by constructing a malicious link with hostile HTML and script code embedded in URI parameters. This code may be rendered in the browser of a user who visits the malicious link. Exploitation could allow for theft of cookie-based authentication credentials or other attacks.