CVE-2020-24135

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web script and HTML via the type parameter to wex/cssjs.php...

CVE-2020-24135

CVE-2020-24135 is a reflected XSS vulnerability in WCMS version 0.3.2. The issue arises in the wex/cssjs.php handler where the attacker can supply a crafted value for the type parameter to inject arbitrary web script/HTML. This vulnerability is documented across multiple sources (e.g., Red Hat, C...

CVE-2020-24135

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web script and HTML via the type parameter to wex/cssjs.php...