CVE-2023-41233

2023-09-2608:15:39

jpcert

www.cve.org

cve-2023-41233

cross-site scripting

item list page registration

welcart e-commerce

remote unauthenticated attacker

arbitrary script injection

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.

CNA Affected

[
  {
    "vendor": "Collne Inc.",
    "product": "Welcart e-Commerce",
    "versions": [
      {
        "version": "versions 2.7 to 2.8.21",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN97197972/

www.welcart.com/archives/20106.html