Lucene search

K
vulnrichmentJpcertVULNRICHMENT:CVE-2023-43614
HistorySep 26, 2023 - 8:19 a.m.

CVE-2023-43614

2023-09-2608:19:56
jpcert
github.com
cross-site scripting
welcart e-commerce
order data edit page
cve-2023-43614
remote unauthenticated attacker

AI Score

6.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.

AI Score

6.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-43614