CVSS 3.1
3.5 lowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:NCVE-2022-21149
Low (3.5) in s-cart s-cart. EPSS 0.6% chance of exploitation in the next 30 days.
The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain unauthorized access to that user's account through the stolen cookie.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- s-cart:s-cart