CVE-2020-19703

2021-08-2603:15:06

Google

osv.dev

xss

dzzoffice 2.02

referer parameter

web scripts

html

crafted payload

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

37.3%

JSON

A cross-site scripting (XSS) vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

References

github.com/zyx0814/dzzoffice/issues/107