CVE-2020-23718

The CVE-2020-23718 entry describes a Cross-Site Scripting (XSS) vulnerability in xujinliang zibbs 1.0 (Zibbs Forum). The root cause, as stated across sources, is insufficient filtering/escaping of the route parameter in index.php, enabling an attacker to execute arbitrary code. Public references ...