Medium severity6.1NVD Advisory· Published Nov 18, 2020· Updated Jun 17, 2026
CVE-2020-22723
CVE-2020-22723
Description
A cross-site scripting (XSS) vulnerability in Beijing Liangjing Zhicheng Technology Co., Ltd ljcmsshop version 1.14 allows remote attackers to inject arbitrary web script or HTML via user.php by registering an account directly in the user center, and then adding the payload to the delivery address.
Affected products
3- cpe:2.3:a:ljcmsshop_project:ljcmsshop:1.14:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =1.14
Patches
Vulnerability mechanics
References
2- baijiahao.baidu.com/snvdThird Party Advisory
- www.freebuf.com/articles/web/192318.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.