medium6.1
CVE-2018-20849
Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.
Impact
Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arastta | Ecommerce | Version 1.6.2 |