Boxcar Media Shopping Cart — known CVE vulnerabilities

Every CVE whose affected-product data names Boxcar Media Shopping Cart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2006-3542 — CVSS 5.8 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers to inject arbitrary web…
• CVE-2006-0111 — CVSS 5.0 (medium): Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or…