CVE-2004-0301: Ecommerce Corporation Online Store Kit

Medium severity, CVSS 6.8. EPSS: 4.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.

Affected products

• Ecommerce Corporation Online Store Kit: version 3.0_lite only; version 3.0_pro only; version 3.0_standard only

Published 2004-11-23. Last modified 2026-06-16.