What’s Vulnerable › Vulnerabilities

CVE-2020-23447

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-01-26 · updated 2026-06-17
• Weakness: CWE-79

Description

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office".

Affected products

• newbee-ltd newbee-mall: 1.0

References

• https://github.com/newbee-ltd/newbee-mall/issues/33
• https://github.com/newbee-ltd/newbee-mall/issues/33

Get alerted when CVE-2020-23447 or the next vulnerability affects your stack