exploitDog

CVE-2020-25876

Опубликовано: 09 июл. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Page Title' parameter.

Ссылки

https://codoforum.com/
Product
https://github.com/r0ck3t1973/xss_payload/issues/3
Exploit
Issue Tracking
Third Party Advisory
https://codoforum.com/
Product
https://github.com/r0ck3t1973/xss_payload/issues/3
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:codologic:codoforum:5.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00287

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-6vpr-xxr9-x356

github

больше 3 лет назад

A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Page Title' parameter.

EPSS

Процентиль: 52%

0.00287

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79