CVE-2020-22841

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module...

CVE-2020-22841

creationtimestamp| type| source ---|---|--- 2024-11-14 06:08:09+00:00| seen| MISP/90eeacac-dcdc-462f-8477-ff6eb6d1eda7...

b2evolution < 6.11.7 Multiple Vulnerabilities

b2evolution is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-22841

CVE-2020-22841 concerns a Stored XSS vulnerability in b2evolution CMS versions up to and including 6.11.6 . The flaw arises in the plugin module’s plugin name input field , where malicious JavaScript can be stored and later executed by other users. Public references document this as a stored XSS ...