high7.3
CVE-2020-28456
The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.
Impact
The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| S-Cart | S-Cart | before 4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/s-cart/core/commit/f4b2811293063a3a2bb497b2512d8a18bd202219
- https://github.com/s-cart/s-cart/issues/52
- https://github.com/s-cart/s-cart/releases/tag/v4.4
- https://snyk.io/vuln/SNYK-PHP-SCARTCORE-1047609
- https://github.com/s-cart/core/commit/f4b2811293063a3a2bb497b2512d8a18bd202219
- https://github.com/s-cart/s-cart/issues/52
- https://github.com/s-cart/s-cart/releases/tag/v4.4
- https://snyk.io/vuln/SNYK-PHP-SCARTCORE-1047609