Lucene search

K
osvGoogleOSV:GHSA-36FM-V9WV-56JF
HistoryMay 06, 2021 - 6:54 p.m.

Cross-site Scripting in OpenCart

2021-05-0618:54:04
Google
osv.dev
16
opencart
xss
vulnerability
image upload

EPSS

0.001

Percentile

48.5%

OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users’ image upload section.

EPSS

0.001

Percentile

48.5%