CVE-2020-13798

2020-06-0322:15:11

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php.

CPENameOperatorVersion
navigate-cmseqlatest

CPE	Name	Operator	Version
	navigate-cms	eq	latest

References

github.com/NavigateCMS/Navigate-CMS/commit/e690bb5d7bbe9df9052b13c403ca0ac5e58054d4