CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

Cross site scripting

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

PT-2024-19484 · Whatacart · Whatacart

Name of the Vulnerable Software and Affected Versions: WhatACart version 2.0.7 Description: A reflected cross-site scripting XSS issue was discovered in WhatACart via the /site/default/search component. This allows for potential malicious script injection and execution. Recommendations: For...

Usha InformatiqueC WhatACart Cross-Site Scripting Vulnerability

Usha InformatiqueC WhatACart is an open source online e-commerce solution from Usha InformatiqueC built on the Yii2 framework. A cross-site scripting vulnerability exists in Usha InformatiqueC WhatACart version v2.0.7, which stems from cross-site scripting contained in the component...

CVE-2024-22551: Improper Neutralization of Input During Web Page Generation

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

CVE-2024-22551

WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...

CVE-2024-22551

WhatACart v2.0.7 is affected by a reflected cross-site scripting (XSS) vulnerability via the /site/default/search component. The issue is documented across multiple sources (CVE-2024-22551) and originates from input handling in that search endpoint. The CVSS v3.1 base score is 6.1 (Medium), with ...

WhatACart 2.0.7 Cross Site Scripting Vulnerability

Exploit Title: WhatACart Version: 2.0.7 - Reflected XSS Date: 2023-12-27 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://whatacart.com Version: 2.0.7 Tested on: https://whatacart.com/demo 1 Go to this page : https://demo.whatacart.com/ 2 Write search field this payload :...

WhatACart 2.0.7 Cross Site Scripting

Exploit Title: WhatACart Version: 2.0.7 - Reflected XSS Date: 2023-12-27 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://whatacart.com Version: 2.0.7 Tested on: https://whatacart.com/demo 1 Go to this page : https://demo.whatacart.com/ 2 Write search field this payload :...