Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cross-site Scripting (XSS)
Vulnerability Description
The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain unauthorized access to that user's account through the stolen cookie.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
s-cart 跨站脚本漏洞
Vulnerability Description
s-cart是s-cart社区的一个基于Php的电子商务管理平台。 s-cart/s-cart 6.9之前的版本和s-cart/core 6.9之前的版本存在安全漏洞，攻击者利用该漏洞可进行跨站脚本攻击(XSS)，它可以窃取任何访问受影响URL的受害者的cookie，从而可获得对该用户帐户的未授权访问。
CVSS Information
N/A
Vulnerability Type
N/A