PT-2021-19674
CVE-2021-32202
·
Published
2021-09-14
·
Updated
2021-09-22
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
CS-Cart version 4.11.1
Description:
The issue allows for copy-paste XSS by manipulating the
post description field in the blog post creation page.Recommendations:
For CS-Cart version 4.11.1, consider restricting access to the blog post creation page until a fix is available, and avoid manipulating the
post description field to minimize the risk of exploitation.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾