CVE-2018-20849

Arastta eCommerce 1.6.2 is affected by CVE-2018-20849: a cross-site scripting (XSS) vulnerability exploitable via PATH_INFO to the login/ URI. The root cause is insufficient input validation leading to stored/reflective-like misuse of user-controlled data that can affect the login path. Documente...