medium4.8
CVE-2020-36012
Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.
Impact
Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bdtask | Multi-Store | Version 1.0.0 |