CVE-2020-11007

CVE-2020-11007 is a medium-severity vulnerability affecting Shopizer versions prior to 2.11.0, where inadequate validation of negative quantities in API or Controller-based operations allows for the creation of incorrect shopping cart and order totals, potentially leading to a negative cart total. The CVSS 3.1 score is 6.5, indicating a network-exploitable vulnerability with low attack complexity and requiring low privileges, resulting in high integrity impact but no confidentiality or availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.