CVE-2020-28456 The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel

Description

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.

Affected products and versions

Product	Affected versions	Fixed in
s-cart/core 4.4	earliest → < 4.4	4.4

Other CVEs of s-cart/core

The 3 CVEs of s-cart/core →

CVE-2022-21149 The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS)… 5.4 Medium CVE-2020-28457 This affects the package s-cart/core before 4.4 7.2 High