| Package | Affected versions | Patched versions |
|---|---|---|
| express-cart | ≤ 1.1.10 |
The express-cart package through 1.1.10 for Node.js allows Reflected XSS (for an admin) via a user input field for product options. NOTE: the vendor states that this "would rely on an admin hacking his/her own website.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free