AmazCart CMS Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in AmazCart CMS version 3.4. This vulnerability allows unauthenticated attackers to inject malicious scripts through the search functionality. The injected scripts are executed when the search history is viewed or the search results are displayed.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute arbitrary JavaScript in the context of the user's browser.

Reproduction

To reproduce this vulnerability, enter a script payload, such as a script tag containing JavaScript code, into the search box. When the search results are displayed or the search history is viewed, the injected script will execute, demonstrating the cross-site scripting vulnerability.