CVE-2009-3592: Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers t...

Security readout for executives and security teams

CVE-2009-3592 is a cross-site scripting issue in Qualiteam X-Cart. A remote attacker could inject script or HTML through the email field in a subscription action. Business impact depends on whether legacy X-Cart remains exposed, because the source bundle does not identify affected versions or a vendor fix. Exposure is most likely on legacy internet-facing X-Cart stores that still expose customer/home.php subscription behavior. The provided data does not define affected versions, so teams must confirm product version and vendor status before scoping impact. Treat this as a legacy web application risk. It is not enough to rely on the CVE age; confirm whether X-Cart is still present and exposed. Prioritize if the store handles customer sessions, payments, or account activity. Mitigation focus: Check Qualiteam/X-Cart guidance for affected versions and fixed releases.; Upgrade or retire unsupported X-Cart installations where exposure is confirmed.; Restrict or monitor the subscription endpoint until remediation is verified..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.