PT-2020-12487

CVE-2020-11006

Published

2020-05-08

Updated

2020-05-13

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Shopizer versions prior to 2.11.0

Description A script can be injected in various forms and saved in the database, then executed when information is fetched from the backend.

Recommendations For versions prior to 2.11.0, update to version 2.11.0 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-8PC4-GVFW-634P

Found an issue in the description? Have something to add? Feel free to write us 👾