PT-2020-17089 · Oscommerce · Oscommerce

Published 2020-11-25 · Updated 2020-11-27 · CVE-2020-29070

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions osCommerce version 2.3.4.1

Description The issue allows an authenticated user to enter an XSS payload into the title section of newsletters, potentially leading to a cross-site scripting vulnerability.

Recommendations For osCommerce version 2.3.4.1, consider restricting access to the newsletter title section for authenticated users until a fix is available. As a temporary workaround, validate and sanitize all user input in the title section to prevent XSS payload execution.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-29070

Affected Products

Oscommerce

References · 7

• 🔥 https://github.com/aslanemre/cve-2020-29070/blob/main/CVE-2020-29070 · Exploit
• https://github.com/gburton/CE-Phoenix/commits/master · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-29070 · Security Note
• https://osv.dev/vulnerability/CVE-2020-29070 · Vendor Advisory
• https://forums.oscommerce.com/forum/17-news-and-announcements · Vendor Advisory
• https://t.me/cvenotify/6222 · Telegram Post
• https://t.me/cvenotify/6233 · Telegram Post