Lucene search
CVE-2020-23643
XSS in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echost
Show more
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2020-23643 | 11 Jan 202114:15 | – | osv |
 | Cross site scripting | 11 Jan 202114:15 | – | prion |
 | CVE-2020-23643 | 11 Jan 202113:15 | – | cvelist |
 | CVE-2020-23643 | 11 Jan 202114:15 | – | nvd |
| Source | Link |
|---|---|
| github | www.github.com/Cherry-toto/jizhicms/issues/29 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| signature | query param | /index.php/Wechat/checkWeixin | Stored XSS vulnerability in JIZHICMS due to unsanitized input in the echostr query parameter. | CWE-79 |
| echostr | query param | /index.php/Wechat/checkWeixin | Stored XSS vulnerability in JIZHICMS due to unsanitized input in the echostr query parameter. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo11 Jan 2021 14:15Current
5.9Medium risk
Vulners AI Score5.9
CVSS24.3
CVSS36.1
EPSS0.0024