← All advisories

Medium severity6.1NVD Advisory· Published Jun 30, 2019· Updated Jun 17, 2026

CVE-2018-20849

CVE-2018-20849

Description

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.

Affected products

2

Arastta/Arastta eCommercedescription
Arastta/eCommercellm-create
Range: 1.6.2

Patches

Vulnerability mechanics

References

1

packetstormsecurity.com/files/147470/Arastta-1.6.2-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.