CVE-2020-6579

Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloader_mode parameter.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2020-04-30

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Mailbeez (Mailbeez)

References

• https://herolab.usd.de/security-advisories/usd-2019-0070/