CVE-2021-42051

An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a malicious SVG document that contains an XSS payload...

CVE-2021-42051

CVE-2021-42051 affects AbanteCart prior to 1.3.2. A low-privileged user with file-upload permissions can upload a malicious SVG document containing an XSS payload, leading to cross-site scripting. The issue is documented across multiple sources (NVD, Red Hat, CNVD, OSV, CNVD) and is mitigated by ...

AbanteCart Arbitrary File Upload / Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: AbanteCart e-commerce platform vulnerable version: 1.3.2 fixed version: 1.3.2 CVE number: CVE-2021-42050, CVE-2021-42051 impact: Medium...