Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2020-28456
PUBLISHED
More InfoOfficial Page
Assigner-snyk
Assigner Org ID-bae035ff-b466-4ff4-94d0-fc9efd9e1730
View Known Exploited Vulnerability (KEV) details
Published At-15 Dec, 2020 | 15:35
Updated At-16 Sep, 2024 | 17:33
Rejected At-
▼CVE Numbering Authority (CNA)
Cross-site Scripting (XSS)

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.

Affected Products
Vendor
n/a
Product
s-cart/core
Versions
Affected
  • From unspecified before 4.4 (custom)
Problem Types
TypeCWE IDDescription
textN/ACross-site Scripting (XSS)
Type: text
CWE ID: N/A
Description: Cross-site Scripting (XSS)
Metrics
VersionBase scoreBase severityVector
3.17.3HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Version: 3.1
Base score: 7.3
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Abdul Muhaimin
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/s-cart/s-cart/releases/tag/v4.4
x_refsource_MISC
https://snyk.io/vuln/SNYK-PHP-SCARTCORE-1047609
x_refsource_MISC
https://github.com/s-cart/s-cart/issues/52
x_refsource_MISC
https://github.com/s-cart/core/commit/f4b2811293063a3a2bb497b2512d8a18bd202219
x_refsource_MISC
Hyperlink: https://github.com/s-cart/s-cart/releases/tag/v4.4
Resource:
x_refsource_MISC
Hyperlink: https://snyk.io/vuln/SNYK-PHP-SCARTCORE-1047609
Resource:
x_refsource_MISC
Hyperlink: https://github.com/s-cart/s-cart/issues/52
Resource:
x_refsource_MISC
Hyperlink: https://github.com/s-cart/core/commit/f4b2811293063a3a2bb497b2512d8a18bd202219
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/s-cart/s-cart/releases/tag/v4.4
x_refsource_MISC
x_transferred
https://snyk.io/vuln/SNYK-PHP-SCARTCORE-1047609
x_refsource_MISC
x_transferred
https://github.com/s-cart/s-cart/issues/52
x_refsource_MISC
x_transferred
https://github.com/s-cart/core/commit/f4b2811293063a3a2bb497b2512d8a18bd202219
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/s-cart/s-cart/releases/tag/v4.4
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://snyk.io/vuln/SNYK-PHP-SCARTCORE-1047609
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/s-cart/s-cart/issues/52
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/s-cart/core/commit/f4b2811293063a3a2bb497b2512d8a18bd202219
Resource:
x_refsource_MISC
x_transferred
Details not found