CVE-2021-47856
Easy Cart Shopping Cart 2021 Cross-Site Scripting via Search Parameter
Easy Cart Shopping Cart 2021 contains a non-persistent cross-site scripting vulnerability in the search module's keyword parameter. Remote attackers can inject malicious script code through the search input to compromise user sessions and manipulate application content.
CVSS 4.0 · 5.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products