CVE-2020-14014

2020-06-2414:22:55

mitre

www.cve.org

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

21.4%

JSON

An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.

References

blog.sean-wright.com/navigate-cms/

cxsecurity.com/issue/WLB-2018090182