3 matches found
CVE-2020-23643
CVE-2020-23643 affects JIZHICMS 1.7.1. The XSS is triggered in Home/c/WechatController.php via index.php/Wechat/checkWeixin?signature=1&echostr={XSS], as reported across multiple sources (NVD, Red Hat, CNVD, OSV). Impact described as injection of arbitrary script/HTML in the browser. CVSS data: C...
6.1CVSS5.9AI score0.007EPSS
SaveExploits1References1Affected Software1
CVE-2020-23643
XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr=XSS to Home/c/WechatController.php...
6.1CVSS0.007EPSS
SaveExploits1References1
CVE-2020-23643: Improper Neutralization of Input During Web Page Generation
XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr=XSS to Home/c/WechatController.php...
6.1CVSS5.7AI score0.007EPSS
SaveExploits1References2
20