Medium severity5.4NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026
CVE-2021-42051
CVE-2021-42051
Description
An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a malicious SVG document that contains an XSS payload.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<1.3.2+ 1 more
- (no CPE)range: <1.3.2
- cpe:2.3:a:abantecart:abantecart:*:*:*:*:*:*:*:*range: <1.3.2
- AbanteCart/AbanteCartdescription
Patches
Vulnerability mechanics
References
2- sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-abantecart-e-commerce-platform/nvdExploitThird Party Advisory
- github.com/abantecart/abantecart-src/releasesnvdRelease NotesThird Party Advisory
News mentions
0No linked articles in our index yet.