EUVD-2020-27727

Malware in sbrugna...

ZenCart MailBeez plugin cross-site scripting vulnerability

MailBeez plugin for ZenCart is a Danish MailBeez company's post-sale e-mail auto-trigger plugin for use in ZenCart e-commerce system. A cross-site scripting vulnerability exists in the mailhive/cloudbeez/cloudloader.php file and the mailhive/cloudbeez/cloudloadercore.php file in MailBeez versions...

CVE-2020-6579

Cross-site scripting XSS vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloadercore.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloadermode parameter...

CVE-2020-6579

Cross-site scripting XSS vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloadercore.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloadermode parameter...

CVE-2020-6579

Cross-site scripting XSS vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloadercore.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloadermode parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloadercore.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloadermode parameter...

CVE-2020-6579

CVE-2020-6579 is an XSS vulnerability in the MailBeez ZenCart plugin. The flaw affects the files mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.php and is exploitable through the cloudloader_mode parameter. Software versions prior to 3.9.22 are affected, allowing a rem...

CVE-2020-6579

Cross-site scripting XSS vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloadercore.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloadermode parameter...

PT-2020-19169

Name of the Vulnerable Software and Affected Versions MailBeez plugin for ZenCart versions prior to 3.9.22 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the cloudloader mode...

CVE-2020-6579: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloadercore.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloadermode parameter...