CVE-2020-21316

CVE-2020-21316 describes an XSS vulnerability in ZrLog 2.1.3’s comment section. The issue allows remote attackers to inject arbitrary scripts via the nickname parameter and potentially steal administrator cookies, gaining access to the admin panel. Affected component: ZrLog 2.1.3; vulnerability t...