未評価
osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters.
CVE-2020-29070
SecPulse初出
参照URL
- advisory forums.oscommerce.com
- patch github.com
- report github.com