2 matches found
CVE-2020-6578
Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...
6.1CVSS6.1AI score0.00844EPSS
SaveExploits1References3
CVE-2020-6578: Improper Neutralization of Input During Web Page Generation
Zen Cart 1.5.6d allows reflected XSS via the mainpage parameter to includes/templates/templatedefault/common/tplmainpage.php or includes/templates/responsiveclassic/common/tplmainpage.php...
6.1CVSS5.8AI score0.00844EPSS
SaveExploits1References2
20