CVE-2009-1820: Cross-site scripting (XSS) vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remo...

Security readout for executives and security teams

This CVE describes a cross-site scripting flaw in 2daybiz Custom T-shirt Design Script. A malicious link to product.php could cause a visitor's browser to run attacker-supplied script through the id parameter. Business impact depends on whether this old script is still deployed and whether affected pages handle customer sessions or checkout flows. Exposure is likely limited to organizations still running 2daybiz Custom T-shirt Design Script with a reachable product.php endpoint. The provided data does not identify affected versions, deployment prevalence, or maintained package names, so inventory confirmation is required before assigning urgency. Prioritize if the script is internet-facing or tied to customer accounts, payments, or administration. If the product is not present, no action is needed beyond documenting non-exposure. Because the CVE is old and lacks patch details, unsupported deployments should be removed or replaced. Mitigation focus: Check vendor or maintainer guidance for a fixed release or patch.; Retire or isolate the script if no supported fix is available.; Ensure product.php does not reflect unsanitized id values into HTML..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.