3 matches found
CVE-2020-6171
A cross-site scripting XSS vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
6.1CVSS5.7AI score0.04798EPSS
SaveExploits1References1
CVE-2020-6171
CVE-2020-6171 : CLink Office 2.0 management console index page is vulnerable to Cross‑Site Scripting via the lang parameter. Remote attackers can inject arbitrary script/HTML, with impact including potential data theft or session hijacking as described in connected sources. The CVSS shows MEDIUM ...
6.1CVSS5.9AI score0.04798EPSS
SaveExploits1References1Affected Software1
20