Lucene search
+L

6 matches found

NVD
NVD
•added 2026/01/30 5:16 p.m.•14 views

CVE-2020-37003

Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage Your Addresses module that allows attackers to inject malicious scripts. Attackers can exploit multiple address input fields like full name, company, and address to execute persistent script code that...

6.4CVSS0.00268EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/01/30 4:16 p.m.•21 views

EUVD-2020-30961

Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage Your Addresses module that allows attackers to inject malicious scripts. Attackers can exploit multiple address input fields like full name, company, and address to execute persistent script code that...

6.4CVSS6AI score0.00268EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/01/30 4:16 p.m.•44 views

CVE-2020-37003 Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting

Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage Your Addresses module that allows attackers to inject malicious scripts. Attackers can exploit multiple address input fields like full name, company, and address to execute persistent script code that...

6.4CVSS0.00268EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•18 views

Sellacious eCommerce cross-site scripting vulnerability

Sellacious eCommerce is an e-commerce platform software developed by the Sellacious company. Version 4.6 of Sellacious eCommerce contains a cross-site scripting vulnerability. This vulnerability arises from improper cleaning of input fields such as names, companies, and addresses in the Manage Yo...

6.4CVSS5.6AI score0.00268EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•13 views

PT-2026-5414

Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage Your Addresses module that allows attackers to inject malicious scripts. Attackers can exploit multiple address input fields like full name, company, and address to execute persistent script code that...

6.4CVSS6AI score0.00268EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•0 views

CVE-2020-37003: Improper Neutralization of Input During Web Page Generation

Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage Your Addresses module that allows attackers to inject malicious scripts. Attackers can exploit multiple address input fields like full name, company, and address to execute persistent script code that...

6.4CVSS5.9AI score0.00268EPSS
SaveExploits0References1
Rows per page
Query Builder