CVE-2020-35346

CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admin.php?c=content&a=add...

PT-2020-17311

Name of the Vulnerable Software and Affected Versions CXUUCMS V3 version 3.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of "admin.php?c=content&a=add". This enables attackers to perform a reflected XSS attack. Recommendations For...