GHSA-wxxx-2x6v-979fMediumCVSS 6.1

Reflected XSS in Zen Cart before 1.5.7a

Published
May 24, 2022
Last Modified
July 6, 2023

🔗 CVE IDs covered (1)

CVE-2020-6578 →

📋 Description

Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php.

🎯 Affected products1

  • composer/zencart/zencart:< 1.5.7a

🔗 References (4)