Lucene search

K
cvelistMitreCVELIST:CVE-2020-18229
HistoryMay 27, 2021 - 3:20 p.m.

CVE-2020-18229

2021-05-2715:20:24
mitre
www.cve.org
6
cve-2020-18229
phpmywind v5.5
cross site scripting
remote attackers
arbitrary code
parameter injection

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

29.2%

Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter β€œ$cfg_copyright” of component " /admin/web_config.php".

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

29.2%

Related for CVELIST:CVE-2020-18229