CVE-2022-21149
SCart is vulnerable to cross-site scripting (XSS)
Summary
SCart is vulnerable to cross-site scripting (XSS)
Original description
The description as published by the source.
SCart e-commerce is a free open source for businesses, built on the Laravel framework. The package s-cart/s-cart before 6.9 and the package s-cart/core before 6.9 are vulnerable to cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL. An attacker can gain unauthorized access to that user's account through the stolen cookie.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
s-cart/core
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9"}]}]
Packagist
s-cart/s-cart
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web snyk.io
- web snyk.io