CVE-2020-20348

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

CVE-2020-20348

CVE-2020-20348 affects WTCMS 1.0. The vulnerability is a stored cross-site scripting (XSS) in the link field under the background menu management module. Impact is reflected via stored user input; CVSS indicates MEDIUM (3.1) and LOW (2.0) severities depending on metric. No remediation details are...