medium5.4Public exploit code
CVE-2020-10596
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated)2020-06-02 · webapps · php
Impact
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opencart | Opencart | Version 3.0.3.2 |