CVE-2020-23689

2021-05-1414:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.

CPENameOperatorVersion
yfcmfeqV2.0.0
yfcmfeq2.3.1
yfcmfeqV1.2.0
yfcmfeq1.0.1
yfcmfeqV1.1.0
yfcmfeqV1.1.1

Name	Operator	Version
yfcmf	eq	V2.0.0
yfcmf	eq	2.3.1
yfcmf	eq	V1.2.0
yfcmf	eq	1.0.1
yfcmf	eq	V1.1.0
yfcmf	eq	V1.1.1

References

github.com/lxw1844912514/YFCMF/issues/2