CVE-2006-6485: Shopsite

Medium severity, CVSS 6.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the prevlocation parameter in shopper/sc/registration.cgi and other unspecified vectors.

Affected products

• Shopsite Shopsite: version 8.1 only

Published 2006-12-12. Last modified 2026-06-16.