CVE-2004-0681: Comersus Open Technologies Comersus Cart

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter.

Affected products

Published 2004-08-06. Last modified 2026-06-16.