CVE-2023-41962 (published 2023-09-26T08:16:35.700Z)
Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page.
Affected products: Vendor: Collne Inc.
Product: Welcart e-Commerce
Versions: versions 2.7 to 2.8.21