CVE-2020-25875

CVE-2020-25875 affects Codoforum v5.0.2, where a stored XSS exists in the Smileys feature. The vulnerability occurs via crafted payloads in the Smiley Code parameter, and is exploitable by authenticated attackers to execute web scripts or HTML in the context of the affected forum. The connected d...