CVE-2020-5620

2020-08-2503:15:09

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.3%

JSON

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file.

CPENameOperatorVersion
exmenteq2.0.1
exmenteq3.1.3
exmenteq1.1.8
exmenteq1.1.6
exmenteq2.1.1
exmenteq1.0.7
exmenteq0.2.0
exmenteq1.1.4
exmenteq1.2.10
exmenteq3.4.2