[MEDIUM] Reflected XSS in Zen Cart before 1.5.7a

PKSA-rkd4-9xy8-g42x CVE-2020-6578 GHSA-wxxx-2x6v-979f

Affected version: <1.5.7a

Reported by:
GitHub

[HIGH] Zen Cart vulnerable to authenticated remote code execution

PKSA-9nhq-jbbn-ycmw CVE-2021-3291 GHSA-38f9-4vhq-9cr8

Affected version: <=1.5.7b

Reported by:
GitHub

[HIGH] Authenticated RCE in Zen Cart 1.5.5e

PKSA-9dzr-t73f-xhjb CVE-2017-11675 GHSA-c9r9-3h38-r7vj

Affected version: <1.5.5e

Reported by:
GitHub