A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' plugin.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://sourceforge.net/p/cszcms/tickets/2/ |
Configurations
No configuration.
Information
Published : 2021-07-09 22:15
Updated : 2021-07-10 02:00
NVD link : CVE-2020-25392
Mitre link : CVE-2020-25392
JSON object : View
Products Affected
No product.
CWE
No CWE.
