medium6.1
CVE-2020-23975
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter.
Impact
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webexcels | Ecommerce Cms | Versions 2017, 2018, 2019, 2020 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cxsecurity.com/issue/WLB-2020030174
- https://packetstormsecurity.com/files/156948/Webexcels-Ecommerce-CMS-2.x-SQL-Injection-Cross-Site-Scripting.html
- https://cxsecurity.com/issue/WLB-2020030174
- https://packetstormsecurity.com/files/156948/Webexcels-Ecommerce-CMS-2.x-SQL-Injection-Cross-Site-Scripting.html