[MEDIUM] Reflected XSS in Zen Cart before 1.5.7a

PKSA-rkd4-9xy8-g42x CVE-2020-6578 GHSA-wxxx-2x6v-979f

Affected version: <1.5.7a

Reported by:
GitHub

[HIGH] Zen Cart vulnerable to authenticated remote code execution

PKSA-9nhq-jbbn-ycmw CVE-2021-3291 GHSA-38f9-4vhq-9cr8

Affected version: <=1.5.7b

Reported by:
GitHub