2 matches found
CVE-2020-6956
PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...
6.1CVSS5.8AI score0.007EPSS
SaveExploits1References1
CVE-2020-6956
CVE-2020-6956 concerns PCS DEXICON 3.4.1, where a Cross-Site Scripting (XSS) vulnerability exists in the loginName parameter of login_action.jsp. The root cause, per CNVD, is inadequate validation of client-side data by the WEB application, enabling execution of client-side code. Documented impac...
6.1CVSS5.9AI score0.007EPSS
SaveExploits1References1Affected Software1
20