Lucene search

K
cvelistCertccCVELIST:CVE-2020-9055
HistoryApr 12, 2019 - 12:00 a.m.

CVE-2020-9055 Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript

2019-04-1200:00:00
CWE-79
certcc
raw.githubusercontent.com
1

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.8%

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.8%

Related for CVELIST:CVE-2020-9055