Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2021-47856

Easy Cart Shopping Cart 2021 Cross-Site Scripting via Search Parameter

Description

Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetArt Media Easy Cart Shopping Cart

Default version status: unaffected

  • 2021affected

References