Lucene search
MitreCVELIST:CVE-2020-25750HistorySep 18, 2020 - 3:25 a.m.
CVE-2020-25750
2020-09-1803:25:50
mitre
www.cve.org
0.003 Low
EPSS
Percentile
69.2%
An issue was discovered in DotPlant2 before 2020-09-14. In class Pay2PayPayment in payment/Pay2PayPayment.php, there is an XXE vulnerability in the checkResult function. The user input ($_POST[âxmlâ]) is used for simplexml_load_string without sanitization. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Related
cve
cve
CVE-2020-25750
2020-09-18 04:15:12
osv
osv
DotPlant2 Improper Restriction of XML External Entity Reference
2022-05-24 17:29:01
github
github
DotPlant2 Improper Restriction of XML External Entity Reference
2022-05-24 17:29:01
prion
prion
Code injection
2020-09-18 04:15:00
nvd
nvd
CVE-2020-25750
2020-09-18 04:15:12