PT-2020-18751

Name of the Vulnerable Software and Affected Versions Codoforum version 4.8.3 Description The issue allows for XSS in the user registration page, specifically through the username field when accessing the "index.php?u=/user/register" API endpoint. The payload can be executed on the...

CVE-2020-5842: Improper Neutralization of Input During Web Page Generation

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page...