Cross site scripting

2023-09-2715:19:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

credit card payment

remote attacker

arbitrary script

nvd

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page.

CPENameOperatorVersion
welcart_e-commercege2.7
welcart_e-commercele2.8.21

CPE	Name	Operator	Version
	welcart_e-commerce	ge	2.7
	welcart_e-commerce	le	2.8.21

References

jvn.jp/en/jp/JVN97197972/

www.welcart.com/archives/20106.html