CVE-2020-20982

2021-11-0316:07:28

mitre

www.cve.org

8.8 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php.

References

github.com/shadoweb/wdja/issues/1