CVE-2020-11007

In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping cart. This has been patched in version 2.11.0.
Configurations

Configuration 1 (hide)

cpe:2.3:a:shopizer:shopizer:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-04-16 19:15

Updated : 2024-02-04 21:00


NVD link : CVE-2020-11007

Mitre link : CVE-2020-11007

CVE.ORG link : CVE-2020-11007


JSON object : View

Products Affected

shopizer

  • shopizer
CWE
CWE-20

Improper Input Validation