CVE-2020-18451

Cross Site Scripting XSS vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php...

CVE-2020-18451

CVE-2020-18451 is an XSS vulnerability in DamiCMS v6.0.6, arising from an unsanitized input of the title parameter in the doadd function of LabelAction.class.php. Affects the web app’s ability to handle user-supplied titles, enabling cross-site scripting. NVD reports CVSSv3.1 base score 4.8 (MEDI...