CVE-2020-11007: medium-severity vulnerability in shopizer-ecommerce shopizer
Negative charge in shopping cart possible in Shopizer
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.9%
In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping cart. This has been patched in version 2.11.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
shopizer-ecommerce · shopizerRelated CVEs — shopizer-ecommerce shopizer
In the same product, most dangerous first.