CVE-2020-22152

2023-07-0300:00:00

mitre

www.cve.org

cve-2020-22152

cross site scripting

remote code execution

page function

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

JSON

Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function.

References

github.com/daylightstudio/FUEL-CMS/issues/552