Lucene search

K
cvelistMitreCVELIST:CVE-2020-20345
HistorySep 01, 2021 - 9:25 p.m.

CVE-2020-20345

2021-09-0121:25:11
mitre
www.cve.org
2
wtcms
cross-site scripting
cookie theft
search box

EPSS

0.001

Percentile

26.4%

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box.

EPSS

0.001

Percentile

26.4%

Related for CVELIST:CVE-2020-20345