2017-05-08 06:10:00
mitre
PUBLISHED
Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendors README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."