Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Ant E-Commerce Software allows SQL Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00731·Published 2023-08-08·Fixed in 11CWE-89
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Reflected XSS.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00472·Published 2023-08-08·Fixed in 11CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Stored XSS.
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00448·Published 2023-08-08·Fixed in 11CWE-79