CVE-2020-21146

2021-01-2618:15:42

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS.

CPENameOperatorVersion
cmseq2.0.4.1
cmseq0.0.5
cmseq2.0.5.1
cmseq0.0.8
cmseq2.0.2
cmseq2.0.5
cmseq0.1.0
cmseq0.0.1
cmseq0.0.9
cmseq2.0.3

Name	Operator	Version
cms	eq	2.0.4.1
cms	eq	0.0.5
cms	eq	2.0.5.1
cms	eq	0.0.8
cms	eq	2.0.2
cms	eq	2.0.5
cms	eq	0.1.0
cms	eq	0.0.1
cms	eq	0.0.9
cms	eq	2.0.3

Rows per page:

1-10 of 331

References

github.com/liufee/cms/issues/43