Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html
No PoCs found on GitHub currently.