CVE-2020-10596
Published
CVSS v3
5.4
MEDIUM
CVSS v2
3.5
LOW
Affected
1
PROJECT
Description
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.
A free shopping cart system. OpenCart is an open source PHP-based online e-commerce solution.
GitHub