CVE-2020-26669

2021-06-0114:13:24

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to site/index.php/admin/pages/update.

References

www.exploit-db.com/exploits/48831