Path Traversal in S-Cart

MEDIUM 4.4CVE-2021-44111 · GHSA-h676-pjr4-hgqx · Published 11/02/2022 · updated 17/06/2026

In short

CVE-2021-44111 is a MEDIUM (CVSS 4.4) vulnerability affecting s-cart/s-cart, s-cart (s-cart).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 41.2% of all vulnerabilities.
Fix: update to 6.7.2 or later.

Package	Affected versions	Patched versions
s-cart/s-cart Packagist	`< 6.7.2`	`6.7.2`
s-cart s-cart	`< 6.7.2`	`6.7.2`

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.

NVD description

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.