CVE-2020-25093

6.1 mediumEPSS 0.7%

Medium (6.1) in ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrap. EPSS 0.7% chance of exploitation in the next 30 days.

Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in blog.php. within application/views/templates/clothesshop, application/views/templates/onepage, and application/views/templates/redlabel.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-09-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ecommerce-codeigniter-bootstrap_project:ecommerce-codeigniter-bootstrap

References

https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22

Check your stack JSON