Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webcart | Webcart | 2.20 (including) | 2.20 (including) |
| Webcart | Webcart | 2.25 (including) | 2.25 (including) |