Skip to content
OpenAdvisories

Package · npm

express-cart

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-9pr3-7449-977r

    Cross-Site Scripting in express-cart

    All versions of `harp` are vulnerable to Cross-Site Scripting. In the admin page it is possible to inject arbitrary JavaScript as a new product option, allowing attackers to execute arbitrary code. This is limited to the admin page and does not affect other p…

    express-cart npm