Unscored CVE-2022-27168 EUVD-2022-31704GHSA-5vw9-c5v7-h5h9

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecifi…

Published Jul 11, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
LiteCart	LiteCart	versions prior to 2.4.2	—

References

https://www.litecart.net/en/
https://github.com/litecart/litecart
https://github.com/litecart/litecart/commit/050fea86cc162f3da2f7824f586602125a0f6d63
https://jvn.jp/en/jp/JVN32625020/index.html