Cross-Site Scripting Weakness in CS-Cart by Simbirsk Technologies
CVE-2021-32202

6.1MEDIUM

Key Information:

Vendor

Cs-cart

Status
Cs-cart
Vendor
CVE Published:
14 September 2021

What is CVE-2021-32202?

In CS-Cart version 4.11.1, a cross-site scripting vulnerability allows attackers to exploit the 'post description' field in the blog post creation interface. By carefully crafting their input, an attacker can induce a copy-paste XSS attack, potentially leading to unauthorized actions or data exposure for users interacting with the affected web application.

References

https://github.com/l00neyhacker/CVE-2021-32202
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.