Medium · 6.1 CVE-2024-45366 EUVD-2024-41446GHSA-2382-xh76-j493

Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script m…

Published Sep 18, 2024 · Updated Nov 5, 2024 · Assigned by jpcert

Vendor: Welcart Product: Welcart e-Commerce

Description

Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.

Affected products

Vendor	Product	Affected	Fixed
Welcart	Welcart e-Commerce	prior to 2.11.2	—

References

https://www.welcart.com/archives/22581.html
https://jvn.jp/en/jp/JVN19766555/