Lucene search
HistorySep 07, 2022 - 10:15 p.m.
CVE-2020-19914
cve
2020
19914
cross site scripting
xss
xiunobbs
remote attackers
web script
html
attachment upload
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
45.6%
Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.
Affected configurations
Node
xiunoxiunobbsMatch4.0.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| xiuno:xiunobbs | xiuno xiunobbs | eq | 4.0.4 |
Social References
More
Related
cvelist
cvelist
CVE-2020-19914
2022-09-07 21:14:42
prion
prion
Cross site scripting
2022-09-07 22:15:00
nvd
nvd
CVE-2020-19914
2022-09-07 22:15:08
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
45.6%
Related for CVE-2020-19914