CVE-2022-21149
SCart is vulnerable to cross-site scripting (XSS)
Résumé
SCart is vulnerable to cross-site scripting (XSS)
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SCart e-commerce is a free open source for businesses, built on the Laravel framework. The package s-cart/s-cart before 6.9 and the package s-cart/core before 6.9 are vulnerable to cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL. An attacker can gain unauthorized access to that user's account through the stolen cookie.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
s-cart/core
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9"}]}]
Packagist
s-cart/s-cart
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web snyk.io
- web snyk.io