Vulnerabilities > S Cart > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-02-11 CVE-2021-44111 Path Traversal vulnerability in S-Cart
A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.
local
low complexity
s-cart CWE-22
4.4
2020-12-15 CVE-2020-28457 Cross-site Scripting vulnerability in S-Cart
This affects the package s-cart/core before 4.4.
network
low complexity
s-cart CWE-79
4.8
2020-12-15 CVE-2020-28456 Cross-site Scripting vulnerability in S-Cart
The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.
network
low complexity
s-cart CWE-79
6.1