CVE-2020-36763

Cross Site Scripting XSS vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post...

CVE-2020-36763

CVE-2020-36763 involves a Cross-Site Scripting (XSS) flaw in DuxCMS 2.1. The issue allows remote attackers to execute arbitrary scripts by manipulating the content , time , and copyfrom parameters when adding or editing a post. Root cause: insufficient input validation/escaping in these fields. I...