CVE-2023-41233 - Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script

Back Back to CVE browser

MEDIUM

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script

Published Sep 26, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.73%

Description

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

Vendor Collne Inc. Product Welcart e-Commerce Default
n/a
- Version
  versions 2.7 to 2.8.21
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Collne Inc.

Welcart e-Commerce

n/a

Version	Status	Constraints
versions 2.7 to 2.8.21	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45750
Advisory
https://jvn.jp/en/jp/JVN97197972/
Third Party Advisory
https://www.welcart.com/archives/20106.html
Release Notes

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45750		Advisory
https://jvn.jp/en/jp/JVN97197972/		Third Party Advisory
https://www.welcart.com/archives/20106.html		Release Notes