CVE-2020-21495

creationtimestamp| type| source ---|---|--- 2021-10-05 00:30:20+00:00| seen| https://t.me/cibsecurity/29945...

CVE-2020-21495

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...

CVE-2020-21495

CVE-2020-21495 is an XSS vulnerability in Xiuno BBS 4.0.4 affecting the /admin/?setting-base.htm page, caused by inadequate handling of the sitename parameter. The vulnerability allows an attacker to inject and execute arbitrary web scripts/HTML in the context of the affected site. The provided c...