CVE-2020-21496

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...

CVE-2020-21496

CVE-2020-21496 describes an XSS vulnerability in Xiuno BBS 4.0.4 affecting the /admin/?setting-base.htm page via the sitebrief parameter. The underlying issue is improper handling of data in sitebrief, enabling arbitrary client-side script execution. Documents do not provide details on exploit st...