CVE-2007-4307: Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to...

Security readout for executives and security teams

Storesprite 7 and earlier has multiple cross-site scripting issues in account-related secure pages. An attacker could make a user open a crafted link and run script in that user's browser in the context of the Storesprite site. The source bundle does not provide a CVSS score or named vendor fix. Exposure is limited to deployments running Storesprite 7 or earlier, especially where the listed secure PHP pages are reachable by users or customers. The bundle's affected product metadata is incomplete, so asset owners must confirm product identity and version from internal inventory. Treat as a legacy web application exposure requiring inventory confirmation. It is not KEV-listed in the supplied data, but customer-facing account pages increase business risk if Storesprite is still deployed. Mitigation focus: Check current vendor or maintainer guidance for Storesprite fixes or retirement advice.; Upgrade away from Storesprite 7 or earlier if a supported fixed version exists.; Validate and encode all reflected next parameter output on affected pages..

Prepared

Jun 29, 2026, 04:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.