Hucart · Hucart · CVE-2020-18158
Name of the Vulnerable Software and Affected Versions:
HuCart version 5.7.4
Description:
The issue is related to a Cross Site Scripting (XSS) vulnerability. It occurs via the `nickname` in `index.php`. This allows for potential malicious script execution.
Recommendations:
For HuCart version 5.7.4, update the software to a version that fixes this issue, or as a temporary workaround, consider validating and sanitizing the `nickname` input in the `index.php` file to prevent XSS attacks.