CVE-2020-10596 - OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section

MEDIUM

OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section

Published Mar 17, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 2.67%

OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
http://packetstormsecurity.com/files/157908/OpenCart-3.0.3.2-Cross-Site-Scripting.html		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-0914		Advisory
https://github.com/advisories/GHSA-36fm-v9wv-56jf		Advisory
https://github.com/opencart/opencart/issues/7810		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-10596