Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: S-cart Clear all filters
TI-2022-05552 CVE-2022-21149 · GHSA-7pfc-cx3m-v22x

Cross-site scripting (XSS) in s-cart/s-cart

Priority LOW 25

The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00609 Published 2022-05-01 Fixed in 6.9 CWE-79
TI-2020-17271 CVE-2020-28456 · GHSA-c6vf-v2c4-qvvh

Cross-site scripting (XSS) in s-cart/core

Priority LOW 34

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01085 Published 2020-12-15 Fixed in 4.4 CWE-79
TI-2020-17272 CVE-2020-28457 · GHSA-36ww-7vxr-9ggq

Cross-site scripting (XSS) in s-cart/core

Priority LOW 33

This affects the package s-cart/core before 4.4.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00883 Published 2020-12-15 Fixed in 4.4 CWE-79