CVE-2020-22808: Fecmall Project Fecmall

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was found in yii2_fecshop 2.x. There is a reflected XSS vulnerability in the check cart page.

Affected products

• Fecmall Project Fecmall: from 2.0.0, up to and including 2.13.3

Published 2021-04-29. Last modified 2026-06-17.