EUVD-2020-21452

Malware in sbrugna...

CVE-2020-29070

osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters...

PT-2020-17089

Name of the Vulnerable Software and Affected Versions osCommerce version 2.3.4.1 Description The issue allows an authenticated user to enter an XSS payload into the title section of newsletters, potentially leading to a cross-site scripting vulnerability. Recommendations For osCommerce version...