CVE-2020-19157

2021-09-1513:52:54

mitre

www.cve.org

cross site scripting

wenku cms v3.4

remote attackers

arbitrary code

intro parameter

index.php

ucenter

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the ‘Intro’ parameter for the component ‘/index.php?m=ucenter&a=index’.

References

github.com/TL-swallow/swallow/issues/14