Description
Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field.
Unscored
CVE-2020-20508
EUVD-2020-13295GHSA-p48c-42m5-8gmw
Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which allows attackers to h…
Published Sep 24, 2021 · Updated Aug 4, 2024 · Assigned by mitre