Security Advisory

CVE-2020-20640

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-28 17:29:08

Last updated 2024-08-04 14:22:25

Assigner mitre

State PUBLISHED

Description

Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass the security policy of the safety.php file, triggering the xss vulnerability.

← Browse all CVEs View on cve.org ↗