4 matches found
CVE-2020-23977
KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...
CVE-2020-23977
KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...
CVE-2020-23977
KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...
CVE-2020-23977
CVE-2020-23977 affects KandNconcepts Club CMS 1.1 and 1.2, with cross-site scripting via the id parameter in team.php, player.php, and club.php. The root cause is unsanitized input used in these parameters, enabling XSS. Public details in connected documents confirm the vulnerability, but no expl...