CVE-2020-36012: XSS
Published Jan 27, 2021
·Updated
Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.
Affected Software
1 affected component
BDTASK Multi-store Wordpress=1.0.0
Event History
Jan 27, 2021
CVE Published
via MITRE·12:11 PM
Data Sourced
via MITRE·12:11 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-36012?
CVE-2020-36012 is considered a high-severity stored XSS vulnerability.
2
How do I fix CVE-2020-36012?
To fix CVE-2020-36012, validate and sanitize all user input in the Customer Name Field to prevent code injection.
3
Who is impacted by CVE-2020-36012?
CVE-2020-36012 affects users of BDTASK Multi-Store Inventory Management System version 1.0.0.
4
What type of vulnerability is CVE-2020-36012?
CVE-2020-36012 is categorized as a stored Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2020-36012 be exploited remotely?
Yes, an attacker needs local admin access to exploit CVE-2020-36012.