s-cart Cross-Site Scripting Vulnerability (CNVD-2022-70091)

s-cart is a Php-based e-commerce management platform from the s-cart community. s-cart versions prior to 6.9 contain a cross-site scripting vulnerability that can be exploited by attackers to execute JavaScript code on the client side, which can steal cookies from any victim who accesses the affected URL, allowing unauthorized access to that user’s account.