CVE-2020-24992

2021-05-1719:15:07

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module.

CPENameOperatorVersion
cmswingeq1.0.0
cmswingeq1.1.0
cmswingeq77
cmswingeq1.3.1
cmswingeq1.3.7
cmswingeq1.3.6
cmswingeq1.3.3

Name	Operator	Version
cmswing	eq	1.0.0
cmswing	eq	1.1.0
cmswing	eq	77
cmswing	eq	1.3.1
cmswing	eq	1.3.7
cmswing	eq	1.3.6
cmswing	eq	1.3.3

References

github.com/arterli/CmsWing/issues/54