[ASA-202009-6] chromium: multiple issues

Arch Linux Security Advisory ASA-202009-6 ========================================= Severity: High Date : 2020-09-09 CVE-ID : CVE-2020-6573 CVE-2020-6574 CVE-2020-6575 CVE-2020-6576 CVE-2020-6579 Package : chromium Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1225...

CVE-2020-6579

Cross-site scripting XSS vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloadercore.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloadermode parameter...

CVE-2020-6579

CVE-2020-6579 is an XSS vulnerability in the MailBeez ZenCart plugin. The flaw affects the files mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.php and is exploitable through the cloudloader_mode parameter. Software versions prior to 3.9.22 are affected, allowing a rem...