Lucene search

[email protected]CVE-2020-21505

HistoryOct 05, 2021 - 10:15 p.m.

CVE-2020-21505

2021-10-0522:15:07

CWE-79

[email protected]

web.nvd.nist.gov

waimai

super cms

20150505

xss

vulnerability

admin

link

addsave

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

37.5%

JSON

waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.

Affected configurations

NVD

Node

waimai_super_cms_projectwaimai_super_cmsMatch20150505

CPENameOperatorVersion
waimai_super_cms_project:waimai_super_cmswaimai super cms project waimai super cmseq20150505

CPE	Name	Operator	Version
waimai_super_cms_project:waimai_super_cms	waimai super cms project waimai super cms	eq	20150505

References

github.com/caokang/waimai/issues/16

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

37.5%

JSON

Related for CVE-2020-21505

prion1 cvelist1 nvd1