CVE-2020-29146

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

CVE-2020-29146

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

CVE-2020-29146

CVE-2020-29146 affects Wayang-CMS v1.0, where an XSS flaw exists in index.php that can be triggered by a crafted payload via the X-Forwarded-For header. The connected documents confirm the vulnerability target (Wayang-CMS 1.0, index.php) and the mechanism (XSS through header manipulation). The Re...