CVE-2021-20734: XSS
Published Jun 22, 2021
·Updated
Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Affected Software
2 affected components
Collne Welcart Wordpress=1.5.2
Welcart Welcart e-Commerce WordPress=1.5.2
Event History
Jun 22, 2021
CVE Published
via MITRE·01:35 AM
Data Sourced
via MITRE·01:35 AM
DescriptionWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this cross-site scripting vulnerability?
The vulnerability ID for this cross-site scripting vulnerability is CVE-2021-20734.
2
What is the severity level of CVE-2021-20734?
The severity level of CVE-2021-20734 is medium (6.1).
3
Which software versions are affected by this vulnerability?
Welcart e-Commerce versions prior to 2.2.4 are affected by this vulnerability.
4
How can attackers exploit this vulnerability?
Attackers can exploit this vulnerability by injecting arbitrary script or HTML via unspecified vectors.
5
Are there any official references for CVE-2021-20734?
Yes, you can find official references for CVE-2021-20734 in the following links: - [JVN](https://jvn.jp/en/jp/JVN70566757/index.html) - [Welcart](https://www.welcart.com/archives/14039.html)