Skip to content
Sign in
7.2 High

CVE-2020-28457 This affects the package s-cart/core before 4.4

Description

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.

Affected products and versions

Product Affected versions Fixed in
s-cart/core 4.4 earliest → < 4.4 4.4

Other CVEs of s-cart/core

The 3 CVEs of s-cart/core →
CVE-2022-21149 The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS)… 5.4 Medium CVE-2020-28456 The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel 7.3 High
Track this CVE