CVE-2020-20584

Baigo CMS v4.0-beta-1 contains a Cross-Site Scripting (XSS) vulnerability that can be triggered by the post parameter to /public/console/profile/info-submit/. Multiple sources confirm the issue and describe the impact as arbitrary web script or HTML execution. The PT-2021-10508 entry notes the vu...