3 matches found
PHPMyWind Cross Site Scripting (CVE-2020-18229)
A cross site scripting vulnerability exists in PHPMyWind. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
3.5CVSS4.8AI score0.00932EPSS
SaveExploits1
CVE-2020-18229
CVE-2020-18229 affects PHPMyWind v5.5 with a Cross Site Scripting (XSS) vulnerability in the /admin/web_config.php component, where injecting scripts into the parameter $cfg_copyright allows remote attackers to execute arbitrary code. The connected documents consistently describe the flaw as an X...
4.8CVSS5.3AI score0.00932EPSS
SaveExploits1References1Affected Software1
20