CVE-2020-23989

NeDi 1.9C contains a cross-site scripting vulnerability in pwsec.php (XSS via pwsec.php oid). The CVE entry CVE-2020-23989 documents a pwsec.php oid XSS affecting NeDi 1.9C. Connected sources (CNVD-2020-62487, OPENVAS) corroborate multiple XSS vulnerabilities in NeDi