CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2021/04/29 11:15 p.m.•10 views

CVE-2020-18035

Cross Site Scripting XSS in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java"...

6.1CVSS6.8AI score

Exploits0References1

NVD•added 2021/04/29 11:15 p.m.•8 views

CVE-2020-18035

6.1CVSS0.00429EPSS

Exploits0References1

Prion•added 2021/04/29 11:15 p.m.•11 views

Cross site scripting

4.3CVSS6.3AI score0.00429EPSS

Exploits0References1Affected Software1

Cvelist•added 2021/04/29 10:53 p.m.•9 views

CVE-2020-18035

6.4AI score0.00429EPSS

Exploits0References1

CVE•added 2021/04/29 10:53 p.m.•52 views

CVE-2020-18035

CVE-2020-18035 is a cross-site scripting vulnerability in Jeesns v1.4.2. The issue arises in the CKEditor integration, specifically through the CKEditorFuncNum parameter in the file/component CkeditorUploadController.java, allowing remote attackers to craft inputs that execute arbitrary code in t...

6.1CVSS6.3AI score0.00429EPSS

Exploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by