CVE-2020-20982

Cross Site Scripting XSS vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php...

CVE-2020-20982

creationtimestamp| type| source ---|---|--- 2021-11-03 19:23:38+00:00| seen| https://t.me/cibsecurity/31736...

CVE-2020-20982

CVE-2020-20982 affects shadoweb wdja v1.5.1. The vulnerability is a Cross-Site Scripting (XSS) flaw in the backurl handling of /php/passport/index.php , potentially allowing an attacker to execute arbitrary scripts in the victim’s browser and escalate privileges within the user context. Affected ...