CVE-2020-29471: OpenCart Stored Cross-Site Scripting
Summary
CVE-2020-29471: OpenCart Stored Cross-Site Scripting. Affects opencart/opencart versions 3.0.3.6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenCart is an open-source e-commerce platform that allows users to create and manage online stores. It provides various features for product management, order processing, and customer management. OpenCart version 3.0.3.6 is impacted by a stored cross-site scripting (XSS) vulnerability in the Profile Image functionality. This vulnerability allows an admin to upload a profile image containing malicious JavaScript code. When viewed by anyone, the code executes and triggers an XSS attack.
Vulnerability Detail
The stored cross-site scripting (XSS) vulnerability in OpenCart 3.0.3.6 arises from the lack of proper input sanitization and validation in the Profile Image feature. By uploading a profile image containing JavaScript code, an attacker with admin privileges can inject and execute arbitrary code on the affected website. This can lead to various security risks, including unauthorized access, data theft, and potential compromise of user accounts. The vulnerability has a CVSS score of 4.8, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the Profile Image functionality in OpenCart 3.0.3.6. This can be achieved by modifying the relevant code or configuration settings to prevent the upload and display of profile images. However, this workaround may impact the user experience and should only be considered until the official fix or upgrade can be implemented.
Conclusion
OpenCart version 3.0.3.6 is susceptible to a stored cross-site scripting (XSS) vulnerability in the Profile Image feature. This vulnerability allows an attacker to upload a profile image containing malicious JavaScript code, leading to potential XSS attacks. It is recommended to apply the official patch or upgrade to a newer version that includes the fix. Users can also utilize Vulert (https://vulert.com) to check if their OpenCart installation is affected by this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for opencart/opencart →
FAQ
The vulnerability allows an attacker to execute arbitrary code on the affected website, potentially leading to unauthorized access, data theft, and compromise of user accounts.
OpenCart version 3.0.3.6 users who have the Profile Image feature enabled are affected by this vulnerability.
Yes, the OpenCart development team has released a patch to address this vulnerability. Users should update their installations to the latest version.
Yes, this vulnerability can be exploited remotely by an attacker with admin privileges.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
References
Related vulnerabilities
Recent vulnerabilities recorded for opencart/opencart.
