CVE-2018-20703

CubeCart 6.2.2 has Reflected XSS via a /ADMIN-FILE/ query string...

CVE-2018-20703

CubeCart v6.2.2 is affected by a Reflected XSS vulnerability exposed via a /{ADMIN-FILE}/ query string. The issue is described consistently across multiple sources (NVD and related feeds) as CubeCart 6.2.2 Reflected XSS. The root cause in the public descriptions is not dissected beyond the query ...