Lucene search
GoogleOSV:CVE-2020-13564HistoryFeb 01, 2021 - 4:15 p.m.
CVE-2020-13564
2021-02-0116:15:12
Google
osv.dev
3
cross-site scripting
phpgacl
template functionality
arbitrary javascript execution
crafted http request
A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template acl_id parameter.
Related
cve
cve
CVE-2020-13564
2021-02-01 16:15:12
prion
prion
Cross site scripting
2021-02-01 16:15:00
cvelist
cvelist
CVE-2020-13564
2021-02-01 15:07:44
nvd
nvd
CVE-2020-13564
2021-02-01 16:15:12
talos
talos
phpGACL template multiple cross-site scripting vulnerabilities
2021-01-27 00:00:00