A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Smiley Code' parameter.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2021-07-09 22:15
Updated : 2021-07-10 02:00
NVD link : CVE-2020-25875
Mitre link : CVE-2020-25875
JSON object : View
Products Affected
No product.
CWE
No CWE.
