← CVE Intelligence

CVE-2020-28457

Cross-site Scripting (XSS) PUBLISHED

Description (CNA)

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.

Affected (CNA)

Vendor / productVersions
n/a / s-cart/coreaffected unspecified before 4.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.