Lucene search
MitreCVELIST:CVE-2020-29477HistoryDec 30, 2020 - 2:19 p.m.
CVE-2020-29477
2020-12-3014:19:13
mitre
www.cve.org
0.001 Low
EPSS
Percentile
38.9%
Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
Related
nvd
nvd
CVE-2020-29477
2020-12-30 15:15:12
cve
cve
CVE-2020-29477
2020-12-30 15:15:12
prion
prion
Cross site scripting
2020-12-30 15:15:00
exploitdb
exploitdb