• info
• discussion
• exploit
• solution
• references

Dogpatch Software CFWebstore Cross-Site Scripting Vulnerability

It has been reported that CFWebstore is prone to a remote cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input.

Attackers may exploit this vulnerability to steal authentication credentials. Other attacks may also be possible.