Lucene search

K
osvGoogleOSV:CVE-2020-18998
HistoryAug 27, 2021 - 7:15 p.m.

CVE-2020-18998

2021-08-2719:15:07
Google
osv.dev
4
cross site scripting
blog_mini
remote code execution
blog plugin

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

48.6%

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component ‘/admin/custom/blog-plugin/add’.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

48.6%

Related for OSV:CVE-2020-18998