Vulnerabilities > Arastta

DATE CVE VULNERABILITY TITLE RISK
2019-06-30 CVE-2018-20849 Cross-site Scripting vulnerability in Arastta Ecommerce 1.6.2
Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.
network
low complexity
arastta CWE-79
6.1