CVE-2020-19699

2023-04-0415:15:07

Google

osv.dev

cve-2020-19699

cross site scripting

kohgylw kiftd

remote code execution

upload file

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

50.3%

JSON

Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code via the <ifram> tag in the upload file page.

References

github.com/KOHGYLW/kiftd/issues/32#issuecomment-509868583

kohgylw.gitee.io/