Lucene search
MitreCVELIST:CVE-2020-23376HistoryMay 10, 2021 - 10:12 p.m.
CVE-2020-23376
2021-05-1022:12:53
mitre
www.cve.org
0.001 Low
EPSS
Percentile
31.2%
NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parameter to launch a stored XSS attack.
Related
cve
cve
CVE-2020-23376
2021-05-10 23:15:07
prion
prion
Cross site request forgery (csrf)
2021-05-10 23:15:00
osv
osv
CVE-2020-23376
2021-05-10 23:15:07
nvd
nvd
CVE-2020-23376
2021-05-10 23:15:07