Codethat · Codethat Shoppingcart · CVE-2005-1593
**Name of the Vulnerable Software and Affected Versions**
CodeThat ShoppingCart version 1.3.1
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `id` parameter in the catalog.php file.
**Recommendations**
For CodeThat ShoppingCart version 1.3.1, avoid using the `id` parameter in the catalog.php file until a fix is available. As a temporary workaround, consider validating and sanitizing user input for the `id` parameter to prevent malicious script injection.