Lucene search
MitreCVELIST:CVE-2020-20508HistorySep 24, 2021 - 9:27 p.m.
CVE-2020-20508
2021-09-2421:27:34
mitre
www.cve.org
4
shopkit
xss
vulnerability
user credentials
e-mail field
EPSS
0.001
Percentile
37.3%
Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field.
References
Related
osv
osv
CVE-2020-20508
2021-09-24 22:15:08
cnvd
cnvd
Shopkit Cross-Site Scripting Vulnerability
2021-09-27 00:00:00
cve
cve
CVE-2020-20508
2021-09-24 22:15:08
prion
prion
Cross site scripting
2021-09-24 22:15:00
nvd
nvd
CVE-2020-20508
2021-09-24 22:15:08