Published:2015/02/25  Last Updated:2015/02/25

Information from Zen Cart.JP

Vulnerability ID:JVN#44544694
Title:Zen Cart Japanese version vulnerable to cross-site scripting
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.

For Zen Cart v1.3 jp variants:
Please download the latest version of the patch from the following site and overwrite the software.
http://zen-cart.jp/download.html

For Zen Cart v1.5 ja variants:
Please download the latest version of the software from the following site and upgrade the software.
http://zen-cart.jp/download.html

Reference:
https://github.com/zencart-ja/zc-v1-series/commit/022949bd09444d7e58703cc537dbbd5744c381b8