Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Nj0R0

#41269of 56,330
7.1Total CVSS
Vulnerabilities · 1
PT-2024-10807
7.1
2024-04-30
Unknown · Simplcommerce · CVE-2020-27478
**Name of the Vulnerable Software and Affected Versions** Simplcommerce versions 40734964b0811f3cbaf64b6dac261683d256f961 through 3103357200c70b4767986544e01b19dbf11505a7 **Description** A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted script to the search bar feature. **Recommendations** For versions 40734964b0811f3cbaf64b6dac261683d256f961 through 3103357200c70b4767986544e01b19dbf11505a7, consider disabling the search bar feature until a patch is available to prevent exploitation. Restrict access to the search bar to minimize the risk of arbitrary code execution. Avoid using the search bar feature in the affected versions until the issue is resolved.