CVE-2020-19885

DBHcms v1.2.0 is affected by a stored XSS vulnerability in dbhcms/mod/mod.page.edit.php line 227 due to missing htmlspecialchars handling for $_POST['pageparam_insert_name']. Exploitation requires an authenticated admin user, which could allow hijacking other users. The available connected docume...