CVE-2020-11007

—

CVSS 3.1

6.5 medium

EPSS

<1%p56

Published

Apr 16, 2020 (Apr 16, 2020)

Modified

Jun 17, 2026

Description

In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping cart. This has been patched in version 2.11.0.

Vendors: shopizer
Products: shopizer
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.