CVE-2020-19880

DBHcms v1.2.0 is affected by a stored XSS vulnerability due to the absence of htmlspecialchars protection for the Name field in dbhcms/types.php. This allows a remote unauthenticated attacker to hijack other users by injecting malicious input that is persisted and later rendered in other users’ s...