Lucene search

CVE-2020-23721

🗓️ 10 Mar 2021 14:12:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 28 Views🌐 WEB

CVE-2020-23721: XSS vulnerability in FUEL CMS V1.4.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2020-23721	10 Mar 202114:15	–	nvd
CNVD	FUEL CMS Cross-Site Scripting Vulnerability (CNVD-2021-17199)	11 Mar 202100:00	–	cnvd
Prion	Cross site scripting	10 Mar 202114:15	–	prion
OSV	CVE-2020-23721	10 Mar 202114:15	–	osv
Cvelist	CVE-2020-23721	10 Mar 202113:36	–	cvelist

Nvd

Node

thedaylightstudio fuel_cmsMatch1.4.7

Source	Link
github	www.github.com/daylightstudio/FUEL-CMS/issues/559

Parameter	Position	Path	Description	CWE
lang	query param	/fuelCM/fuel/pages/edit/1	Potential for Cross-Site Scripting (XSS) due to lack of proper input sanitization on language parameter.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Mar 2021 14:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS23.5

CVSS35.4

EPSS0.00172

CWE-79