CVE-2020-29471: XSS
OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this OpenCart vulnerability?
The vulnerability ID for this OpenCart vulnerability is CVE-2020-29471.
What is the severity level of CVE-2020-29471?
CVE-2020-29471 has a severity level of medium (4.8).
How does CVE-2020-29471 impact OpenCart?
CVE-2020-29471 allows an admin to upload a profile image that contains malicious JavaScript code, which can lead to cross-site scripting (XSS) attacks in OpenCart 3.0.3.6.
How can an admin exploit CVE-2020-29471?
An admin can upload a profile image with JavaScript code that will be executed whenever someone views the profile picture, triggering the XSS vulnerability.
What is the recommended solution for CVE-2020-29471?
To mitigate the vulnerability, users should update OpenCart to a version that has addressed the XSS issue.