Lucene search
PRIOn knowledge basePRION:CVE-2020-29477HistoryDec 30, 2020 - 3:15 p.m.
Cross site scripting
2020-12-3015:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
38.9%
Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
Related
cvelist
cvelist
CVE-2020-29477
2020-12-30 14:19:13
nvd
nvd
CVE-2020-29477
2020-12-30 15:15:12
cve
cve
CVE-2020-29477
2020-12-30 15:15:12
exploitdb
exploitdb