PT-2021-23489 · Unknown · Abantecart

Daniel Teo + 1 · Published 2021-12-14 · Updated 2024-03-06 · CVE-2021-42050

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions AbanteCart versions prior to 1.3.2

Description An issue was discovered that allows DOM Based XSS.

Recommendations For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-ABANTECART-2021-42050

CVE-2021-42050

Affected Products

Abantecart

References · 5

• 🔥 https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-abantecart-e-commerce-platform · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-42050 · Security Note
• https://osv.dev/vulnerability/BIT-abantecart-2021-42050 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-42050 · Vendor Advisory
• https://github.com/abantecart/abantecart-src/releases · Note