CVE-2020-29471

OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image

published December 29, 2020

CVSS
—
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01273 · 69.7th percentile
Published
2020-12-29T16:21Z
EPSS history
Timeline
  • 29 DEC 16:21Z
    OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image
    cvelistv5