Описание
OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:opencart:opencart:3.0.3.6:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.00155
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
EPSS
Процентиль: 37%
0.00155
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79