CVE-2020-24135

2021-04-0716:15:12

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web script and HTML via the type parameter to wex/cssjs.php.

CPENameOperatorVersion
wcmseq1.1.3
wcmseq0.1.6
wcmseq0.2.6
wcmseq0.1.3
wcmseq0.3.0
wcmseq0.1.1
wcmseq0.1.5
wcmseq0.1.2
wcmseq0.1.2.1
wcmseq0.2.2

Name	Operator	Version
wcms	eq	1.1.3
wcms	eq	0.1.6
wcms	eq	0.2.6
wcms	eq	0.1.3
wcms	eq	0.3.0
wcms	eq	0.1.1
wcms	eq	0.1.5
wcms	eq	0.1.2
wcms	eq	0.1.2.1
wcms	eq	0.2.2

Rows per page:

1-10 of 331

References

github.com/secwx/research/blob/main/cve/CVE-2020-24135.md

github.com/vedees/wcms/issues/9