Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/vendor/views/add_product.php.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25091.json"