cve/2020/CVE-2020-10596.md

CVE-2020-10596

Description

OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.

POC

Reference

• http://packetstormsecurity.com/files/157908/OpenCart-3.0.3.2-Cross-Site-Scripting.html
• http://packetstormsecurity.com/files/157908/OpenCart-3.0.3.2-Cross-Site-Scripting.html

Github

• https://github.com/miguelc49/CVE-2020-10596-1
• https://github.com/miguelc49/CVE-2020-10596-2