CVE-2020-28457

Published December 15th, 2020

View on NVD ↗

CVSS v3

7.2

HIGH

CVSS v2

3.5

LOW

Affected

PROJECT

Description

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.

s-cart/s-cart

Free Laravel e-commerce for business: shopping cart, cms content, and more...

GitHub

735