Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.8

BDTASK Multi-Store Inventory Management System Stored XSS Risk

CVE-2020-36012 · published 5 years ago
Summary

The BDTASK Multi-Store Inventory Management System 1.0 has a security issue that allows an attacker with administrative access to inject malicious code into the system. This could potentially allow the attacker to steal sensitive information or take control of the system. To protect against this risk, update to a newer version of the software if available, and ensure that all administrative access is strictly controlled and monitored.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
bdtask multi-store 1.0.0
cpe:2.3:a:bdtask:multi-store:1.0.0:*:*:*:*:wordpress:*:*
Original advisory text
Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.
Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.
References
Severity
4.8 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published27 Jan 2021
Updated4 Nov 2026
First seen5 Jul 2026
Sources
CVE-2020-36012 · NVD
CVE-2020-36012 · MITRE
Track software like this
Free during beta