CVE-2004-2174: Early Impact Productcart

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter.

Affected products

• Early Impact Productcart: version 1.5 only; version 1.6b only; version 1.6b001 only; version 1.6b002 only; version 1.6b003 only; version 1.6br only; …

Published 2004-12-31. Last modified 2026-06-16.