A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://sourceforge.net/p/cszcms/tickets/1/ |
Configurations
No configuration.
Information
Published : 2021-07-09 22:15
Updated : 2021-07-10 02:00
NVD link : CVE-2020-25391
Mitre link : CVE-2020-25391
JSON object : View
Products Affected
No product.
CWE
No CWE.
