CVE-2007-2790: Vp-Asp Shopping Cart

Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter.

Affected products

• Vp-Asp Vp-Asp Shopping Cart: up to and including 6.50

Published 2007-05-22. Last modified 2026-06-16.