osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error().

参照URL

• advisory github.com
• advisory nvd.nist.gov
• web forums.oscommerce.com