CVE-2020-23976

CVE-2020-23976 is a critical SQL Injection vulnerability affecting Webexcels Ecommerce CMS versions 2.x, 2017, 2018, 2019, and 2020, specifically through the 'id' parameter in 'content.php'. This flaw carries a CVSS score of 9.8, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise potential for confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, suggesting awareness and potential for future exploitation.