GHSA-wxxx-2x6v-979f

ghsaUSosv

Reflected XSS in Zen Cart before 1.5.7a

view advisory published 2022-05-24Licence: CC-BY-4.0

Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to `includes/templates/template_default/common/tpl_main_page.php` or `includes/templates/responsive_classic/common/tpl_main_page.php.`

01

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-6578US	medium6.1	0.84% (58th)	—	2021-03-19
Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl…

02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.