CVE-2020-5557

The CVE-2020-5557 entry covers a cross-site scripting vulnerability (CWE-79) in CuteNews 2.0.1. Affected software is CuteNews/CutePHP’s News module version 2.0.1; the root cause is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact desc...