Jeesns 1.4.2 - Cross-Site Scripting

Jeesns 1.4.2 is vulnerable to reflected cross-site scripting in the /weibo/topic component and allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. id: CVE-2020-19295 info: name: Jeesns 1.4.2 - Cross-Site Scripting author:...

CVE-2020-19295

A reflected cross-site scripting XSS vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19295

Jeesns 1.4.2 is affected by a reflected XSS in the /weibo/topic component. A crafted payload in the system error message text field can execute arbitrary scripts/HTML in a victim’s browser. The issue is documented as CVE-2020-19295. Affected product: Jeesns 1.4.2 (reflected XSS) with the vulnerab...