{"id":"CVE-2020-6578","details":"Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php.","aliases":["GHSA-wxxx-2x6v-979f"],"modified":"2026-08-18T13:54:41.398178Z","published":"2021-03-19T04:15:13.187Z","references":[{"type":"ADVISORY","url":"https://herolab.usd.de/security-advisories/"},{"type":"EVIDENCE","url":"https://herolab.usd.de/security-advisories/usd-2019-0069/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/zencart/zencart","events":[{"introduced":"10d454d9243ada82bae87e875dbc483c6953283d"},{"last_affected":"10d454d9243ada82bae87e875dbc483c6953283d"}],"database_specific":{"cpe":"cpe:2.3:a:zen-cart:zen_cart:1.5.6d:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.5.6d"},{"last_affected":"1.5.6d"}],"source":"CPE_STRING"}}],"versions":["1.5.6d","v1.5.6c"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-6578.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}