Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2020-28457

Cross-site Scripting (XSS)

Description

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a s-cart/core

  • unspecified to < 4.4affected

References