Vulnerabilities (CVE)

Filtered by vendor S-cart Subscribe
Filtered by product S-cart
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-44111 1 S-cart 1 S-cart 2022-02-18 2.1 LOW 4.4 MEDIUM
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.
CVE-2020-28457 1 S-cart 1 S-cart 2020-12-16 3.5 LOW 4.8 MEDIUM
This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.
CVE-2020-28456 1 S-cart 1 S-cart 2020-12-16 4.3 MEDIUM 6.1 MEDIUM
The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.