UpHeron
All vulnerabilities

Servers and applications

CVE-2020-29471

OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.

Severity
Medium 4.8
Published
29 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenCartServers and applications · cpe:a:opencart:opencart
  • Version 3.0.3.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-29471
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-29471