CVE-2020-23719

2021-11-0217:45:14

mitre

www.cve.org

cross site scripting

admincontroller.php

arbitrary code

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

53.9%

JSON

Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the bbsmeta parameter.

References

github.com/xujinliang/zibbs/issues/5