CVE-2003-0523: Early Impact Productcart

Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter.

Affected products

• Early Impact Productcart: version 1.5 only; version 1.6b only; version 1.6b001 only; version 1.6b002 only; version 1.6b003 only; version 1.6br only; …

Published 2003-08-18. Last modified 2026-06-16.