CVE-2020-14146

2020-06-1514:15:11

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATH_INFO.

CPENameOperatorVersion
kumbiaphpeq1.0-RC2
kumbiaphpeq1.0.0
kumbiaphpeq1.1.1
kumbiaphpeq1.0beta1
kumbiaphpeq1.0.0-rc.2
kumbiaphpeq1.1.0
kumbiaphpeq1.0-RC

Name	Operator	Version
kumbiaphp	eq	1.0-RC2
kumbiaphp	eq	1.0.0
kumbiaphp	eq	1.1.1
kumbiaphp	eq	1.0beta1
kumbiaphp	eq	1.0.0-rc.2
kumbiaphp	eq	1.1.0
kumbiaphp	eq	1.0-RC

References

github.com/jenaye/KumbiaPHP-

github.com/KumbiaPHP/KumbiaPHP/releases