Approved changes feed: RSS · Atom

cpe:2.3:a:opencart:opencart:3.0.3.2:*:*:*:*:*:*:*

part: a version: 3.0.3.2 update: *

VendorOpencart (f5def384-479e-584b-af09-ca24ddfc6912)
ProductOpencart (0f9ea7e5-7639-558d-b50e-fb47a083711e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bitnami/opencart purl2cpe 2026-06-01 10:13:09.510852
pkg:github/opencart/opencart purl2cpe 2026-06-01 10:13:09.510854
pkg:sourceforge/opencart.mirror purl2cpe 2026-06-01 10:13:09.510855

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10596 vulnerable 2026-06-08 05:16:35.339150 Details available
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.
Published: 2020-03-17T14:42:30.000Z
Updated: 2024-08-04T11:06:09.933Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.