3 matches found
CVE-2020-28847
Cross Site Scripting XSS vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment...
5.4CVSS5.8AI score0.00465EPSS
SaveExploits0
CVE-2020-28847
CVE-2020-28847 affects Valine (xCss Valine) 1.4.14 due to insufficient sanitization of the nick parameter in /classes/Comment, enabling cross-site scripting. The issue is documented across multiple feeds; a fix was released in version 1.4.15. Impact is XSS with user-provided nick data stored/echo...
5.4CVSS5.2AI score0.00465EPSS
SaveExploits0References1Affected Software1
20