Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Nj0R0

#39115of 53,630
7.1Total CVSS
Vulnerabilities · 1
PT-2024-10807
7.1
2024-04-30
Unknown · Simplcommerce · CVE-2020-27478
**Name of the Vulnerable Software and Affected Versions** Simplcommerce versions 40734964b0811f3cbaf64b6dac261683d256f961 through 3103357200c70b4767986544e01b19dbf11505a7 **Description** A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted script to the search bar feature. **Recommendations** For versions 40734964b0811f3cbaf64b6dac261683d256f961 through 3103357200c70b4767986544e01b19dbf11505a7, consider disabling the search bar feature until a patch is available to prevent exploitation. Restrict access to the search bar to minimize the risk of arbitrary code execution. Avoid using the search bar feature in the affected versions until the issue is resolved.