CVE-2020-20640

Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass…

published June 28, 2021

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass the security policy of the safety.php file, triggering the xss vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00876 · 58.6th percentile
Published
2021-06-28T17:29Z
EPSS history
Timeline
  • 28 JUN 17:29Z
    Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass…
    cvelistv5