CVE-2020-10596

Description

OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.

Affected packages (1)

• Packagist/opencart/opencartfrom 0, <= 3.0.3.2

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-10596
• PATCHhttps://github.com/myopencart/ocStore
• WEBhttp://packetstormsecurity.com/files/157908/OpenCart-3.0.3.2-Cross-Site-Scripting.html
• WEBhttps://github.com/opencart/opencart/issues/7810