Unscored CVE-2021-20734 EUVD-2021-8148GHSA-m59w-q74p-9vg2

Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML…

Published Jun 22, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Collne Product: Welcart e-Commerce

Description

Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Collne	Welcart e-Commerce	versions prior to 2.2.4	—

References

https://www.welcart.com/archives/14039.html
https://jvn.jp/en/jp/JVN70566757/index.html