{ "schema_version": "1.4.0", "id": "GHSA-w7h9-m9jv-8365", "modified": "2022-05-24T17:40:25Z", "published": "2022-05-24T17:40:25Z", "aliases": [ "CVE-2020-36012" ], "details": "Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36012" }, { "type": "WEB", "url": "https://kislay00.medium.com/m-store-multi-store-inventory-management-system-add-customer-stored-xss-875a376770ec" }, { "type": "WEB", "url": "http://bdtask.com" }, { "type": "WEB", "url": "http://multi-store.com" } ], "database_specific": { "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2021-01-27T13:15:00Z" } }