CVE-2002-0439: Caupo.net Cauposhop

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

Affected products

• Caupo.net Cauposhop: up to and including 1.30a

Published 2002-07-26. Last modified 2026-06-16.