CVE-2018-20141

Name of the Vulnerable Software and Affected Versions: AbanteCart version 1.2.12

Description: The issue is related to reflected cross-site scripting (XSS) that can be triggered via the sort parameter. An example of exploitation is demonstrated by a substring in the URL '/apparel--accessories?sort='.

Recommendations: For AbanteCart version 1.2.12, consider restricting access to the sort parameter in the affected API endpoint until a patch is available. As a temporary workaround, avoid using the sort parameter in URLs to minimize the risk of exploitation.