CVE-2020-20345

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

CVE-2020-20345

Affected software: WTCMS 1.0. Vulnerability: Reflective cross-site scripting (XSS) in the page management backend. Root cause/vector: Attacker-supplied payload in the search box triggers XSS that can expose cookies. Impact: Cookie leakage via crafted input; further exploitation details not provid...