AbanteCart Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in AbanteCart version 1.4.0. This vulnerability allows an attacker to execute JavaScript in the context of the user's browser by sending a malicious URL. Exploitation of this issue could lead to the theft of sensitive user information, such as session cookies, or allow the attacker to perform actions on behalf of the user. The vulnerability can be triggered through the '/about_us?[XSS_PAYLOAD]' URL.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute JavaScript in the victim's browser.

Remediation

Users are advised to update AbanteCart to version 1.4.1.