Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-28457 1 S-cart 1 S-cart 2024-11-21 7.2 High
This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.
CVE-2020-28456 1 S-cart 1 S-cart 2024-11-21 7.3 High
The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.