CVE-2020-23976

CRITICAL

Webexcels Ecommerce CMS - SQL Injection

Title source: llm

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter.

Core 2

Core References

Exploit, Third Party Advisory, VDB Entry x_refsource_misc

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.0218

EPSS Percentile 80.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Status published

Products (4)

webexcels/ecommerce_cms 2017

webexcels/ecommerce_cms 2018

webexcels/ecommerce_cms 2019

webexcels/ecommerce_cms 2020

Published Aug 27, 2020

Tracked Since Feb 18, 2026