Description
Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetArt Media | Easy Cart Shopping Cart | 2021 | — |
References
- Vulnerability Lab Advisory exploit
- Product Homepage product
- VulnCheck Advisory: Easy Cart Shopping Cart 2021 Cross-Site Scripting via Search Parameter third-party-advisory