CVE-2020-22327

An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information...

CVE-2020-22327

CVE-2020-22327 affects HFish 0.5.1. The issue is a stored/reflected-like XSS: when a payload is inserted in the name field, crafted content triggers XSS when an administrator views the information. Documents consistently describe the vulnerability as an XSS in the admin-view path without detailin...