CVE-2014-8377: Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inj...

Security readout for executives and security teams

This is a stored cross-site scripting issue in Webasyst Shop-Script 5.2.2.30933. A malicious contact entry could place script or HTML in the phone number field, potentially affecting staff who later view that contact. The sources do not provide CVSS scoring, confirmed active exploitation, or a named fixed version. Exposure is most likely for organizations still running Webasyst Shop-Script 5.2.2.30933 with contact creation or administration reachable by untrusted users. Treat this as a targeted remediation item, not an emergency, unless the affected application is internet-facing or handles privileged customer administration. Prioritize inventory first because the sources name an old specific version and do not provide active exploitation evidence. Mitigation focus: Identify any Webasyst Shop-Script 5.2.2.30933 installations.; Check Webasyst vendor guidance for fixed releases or supported upgrade paths.; Restrict contact creation and contact administration to trusted users where possible..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.