CVE-2020-20781

creationtimestamp| type| source ---|---|--- 2021-09-30 02:37:17+00:00| seen| https://t.me/cibsecurity/29694...

CVE-2020-20781

UCMS 1.4.7 has a stored XSS in /ucms/index.php?do=list_edit that allows arbitrary HTML/script via crafted text in title, keywords, description, or content fields. Connected documents provide no exploitation details or remediation patches/versions; no fix/version info is in the supplied materials....