CVE-2020-28457: S-Cart

Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days.

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.

Affected products

• S-Cart S-Cart: before 4.4 (fixed in 4.4)

Published 2020-12-15. Last modified 2026-06-17.