← All advisories

High severity7.3OSV Advisory· Published Dec 15, 2020· Updated Jun 17, 2026

CVE-2020-28456

CVE-2020-28456

Description

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

S-Cart/S Cartllm-fuzzy2 versions
<4.4+ 1 more
- (no CPE)range: <4.4
- cpe:2.3:a:s-cart:s-cart:*:*:*:*:*:*:*:*range: <4.4
S-Cart/CoreOSV
Range: 4.0.0, 4.0.0-beta, 4.0.1, …

Patches

Vulnerability mechanics

References

4

github.com/s-cart/core/commit/f4b2811293063a3a2bb497b2512d8a18bd202219nvdPatchThird Party Advisory
github.com/s-cart/s-cart/issues/52nvdExploitThird Party Advisory
snyk.io/vuln/SNYK-PHP-SCARTCORE-1047609nvdExploitThird Party Advisory
github.com/s-cart/s-cart/releases/tag/v4.4nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.