Description

CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.

Remediation

References

CVE-2018-20703

Related Vulnerabilities

MySQL CVE-2023-22046 Vulnerability (CVE-2023-22046)

Oracle HTTP Server CVE-2018-2561 Vulnerability (CVE-2018-2561)

Oracle HTTP Server Other Vulnerability (CVE-2020-35164)

WebLogic CVE-2021-2403 Vulnerability (CVE-2021-2403)

Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44577)

Severity

Medium

Classification

CVE-2018-20703 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities