CVE-2020-19286

CVE-2020-19286 is a stored XSS in Jeesns 1.4.2. The vulnerability resides in the /question/detail component, exploitable via a crafted payload in the editor’s source field, allowing arbitrary web scripts or HTML execution. The connected Red Hat, CNVD, OSV, and CVE records corroborate a stored XSS...