medium6.1
CVE-2023-41962
Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to i…
Impact
Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Welcart | Welcart E-Commerce | from 2.7 through 2.8.21 |