4 matches found
CVE-2020-13633
Fork before 5.8.3 allows XSS via navigationtitle or title...
6.1CVSS5.8AI score
SaveExploits0References1
CVE-2020-13633
Fork before 5.8.3 allows XSS via navigationtitle or title...
6.1CVSS6AI score0.00679EPSS
SaveExploits0References1
CVE-2020-13633
Fork CMS prior to version 5.8.3 is vulnerable to cross-site scripting (XSS) due to insufficient escaping of user-supplied values in navigation_title and pageTitle (createHtml()). The vulnerability allows injection of malicious scripts through these fields, with the impact described as XSS in mult...
6.1CVSS5.9AI score0.00679EPSS
SaveExploits0References1Affected Software1
20