Skip to content
OpenAdvisories
High · 7.2 CVE-2020-28457 EUVD-2020-20889GHSA-36ww-7vxr-9ggq

Cross-site Scripting (XSS)

Published Dec 15, 2020 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.

Affected products

VendorProductAffectedFixed
— s-cart/core unspecified – < 4.4 4.4

References