Medium severity6.1NVD Advisory· Published Jun 28, 2021· Updated Jun 17, 2026

CVE-2020-20640

Description

Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass the security policy of the safety.php file, triggering the xss vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ECShop/ECShopdescription
Ecshop/Ecshopllm-fuzzy
Range: =4.0

Patches

Vulnerability mechanics

References

www.jianshu.com/p/219755c047a1nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000