CVE:CVE-2023-3506
CNNVD:CNNVD-202307-158
Active It Zone Active eCommerce CMS是Active It Zone公司的一个 CMS 系统。
Active It Zone Active eCommerce CMS 6.5.0版本存在跨站脚本漏洞，该漏洞源于文件/ecommerce/support_ticket的参数details会导致跨站脚本。
solution:Upgrade activeitzone active_ecommerce_cms to a higher version than 6.5.0,and avoid the version 6.5.0