CVE-2021-47856

5.1 mediumEPSS 0.3%

Medium (5.1). EPSS 0.3% chance of exploitation in the next 30 days.

Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

6.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-02-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.netartmedia.net/easy-cart
https://www.vulncheck.com/advisories/easy-cart-shopping-cart-cross-site-scripting-via-search-parameter
https://www.vulnerability-lab.com/get_content.php?id=2298

Check your stack JSON