Vendors / S-cart Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now S-cart records in CISA KEV No S-cart vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01291 · Published 2021-11-01 · No fix listed CWE-434
Priority LOW 34
The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.01085 · Published 2020-12-15 · Fixed in 4.4 CWE-79
Priority LOW 33
This affects the package s-cart/core before 4.4.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00883 · Published 2020-12-15 · Fixed in 4.4 CWE-79
Priority LOW 25
The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain…
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00609 · Published 2022-05-01 · Fixed in 6.9 CWE-79
Priority LOW 21
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.
CVSS 3.1 MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00475 · Published 2022-02-11 · Fixed in 6.7.2 CWE-22
Open these records in search → All records by CVSS severity
0 3 2 0 0
THREATIST.IORead the docs