description: Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page.
problem types: Cross-site scripting (XSS)
affected:
{
vendor: Collne Inc.
product: Welcart e-Commerce
versions:
version: versions 2.7 to 2.8.21, status: affected
}