medium4.8
CVE-2020-29070
osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters.
Impact
osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oscommerce | Oscommerce | Version 2.3.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://forums.oscommerce.com/forum/17-news-and-announcements/
- https://github.com/aslanemre/cve-2020-29070/blob/main/CVE-2020-29070
- https://github.com/gburton/CE-Phoenix/commits/master
- https://forums.oscommerce.com/forum/17-news-and-announcements/
- https://github.com/aslanemre/cve-2020-29070/blob/main/CVE-2020-29070
- https://github.com/gburton/CE-Phoenix/commits/master