S-Cart S-Cart
5 CVEs affecting S-Cart S-Cart. Latest disclosed: 2022-05-01. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38847 | High | 8.8 | 2021-11-01 | S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows att… |
CVE-2020-28456 | High | 7.3 | 2020-12-15 | The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel. |
CVE-2020-28457 | High | 7.2 | 2020-12-15 | This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is… |
CVE-2022-21149 | Medium | 5.4 | 2022-05-01 | The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any… |
CVE-2021-44111 | Medium | 4.4 | 2022-02-11 | A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup. |